From 6780dfeeabc8dc8f3456a0813939cd79fda795f8 Mon Sep 17 00:00:00 2001
From: dcashman <dcashman@google.com>
Date: Mon, 4 May 2015 15:06:26 -0700
Subject: [PATCH] Allow system_app to list all services.

The Settings app contains a SystemPropPoker class which notifies every service
on the system that a property has changed.

Address the following denial:
avc:  denied  { list } for service=NULL scontext=u:r:system_app:s0 tcontext=u:r:servicemanager:s0 tclass=service_manager

Bug: 20762975
Change-Id: I81926e8833c1abcb17a4d49687fc89619b416d6c
---
 system_app.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/system_app.te b/system_app.te
index 895ff7125..964407e6e 100644
--- a/system_app.te
+++ b/system_app.te
@@ -48,6 +48,7 @@ allow system_app anr_data_file:file create_file_perms;
 # Settings need to access app name and icon from asec
 allow system_app asec_apk_file:file r_file_perms;
 
+allow system_app servicemanager:service_manager list;
 allow system_app mediaserver_service:service_manager find;
 allow system_app nfc_service:service_manager find;
 allow system_app radio_service:service_manager find;
-- 
GitLab