From 8f5a891ff8c394ae462632bd62dc42e4392d646f Mon Sep 17 00:00:00 2001
From: dcashman <dcashman@google.com>
Date: Wed, 10 Feb 2016 10:18:44 -0800
Subject: [PATCH] Make voiceinteractionservice app_api_service.
Address the following denial from 3rd party voice interaction test:
SELinux : avc: denied { find } for service=voiceinteraction pid=30281 uid=10139 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:voiceinteraction_service:s0 tclass=service_manager permissive=0
Bug: 27105570
Change-Id: Ib87d364673cbc883df017bcda7fe1e854a76654f
---
platform_app.te | 1 -
priv_app.te | 1 -
service.te | 2 +-
3 files changed, 1 insertion(+), 3 deletions(-)
diff --git a/platform_app.te b/platform_app.te
index eaf863a3f..3d46f7f87 100644
--- a/platform_app.te
+++ b/platform_app.te
@@ -47,6 +47,5 @@ allow platform_app mediacodec_service:service_manager find;
allow platform_app persistent_data_block_service:service_manager find;
allow platform_app radio_service:service_manager find;
allow platform_app surfaceflinger_service:service_manager find;
-allow platform_app voiceinteraction_service:service_manager find;
allow platform_app app_api_service:service_manager find;
allow platform_app system_api_service:service_manager find;
diff --git a/priv_app.te b/priv_app.te
index de682d7a2..275020f12 100644
--- a/priv_app.te
+++ b/priv_app.te
@@ -31,7 +31,6 @@ allow priv_app surfaceflinger_service:service_manager find;
allow priv_app app_api_service:service_manager find;
allow priv_app system_api_service:service_manager find;
allow priv_app persistent_data_block_service:service_manager find;
-allow priv_app voiceinteraction_service:service_manager find;
# Traverse into /mnt/media_rw for bypassing FUSE daemon
# TODO: narrow this to just MediaProvider
diff --git a/service.te b/service.te
index 4d1cfa8c4..24118ff1a 100644
--- a/service.te
+++ b/service.te
@@ -101,7 +101,7 @@ type usagestats_service, app_api_service, system_server_service, service_manager
type usb_service, app_api_service, system_server_service, service_manager_type;
type user_service, app_api_service, system_server_service, service_manager_type;
type vibrator_service, app_api_service, system_server_service, service_manager_type;
-type voiceinteraction_service, system_server_service, service_manager_type;
+type voiceinteraction_service, app_api_service, system_server_service, service_manager_type;
type wallpaper_service, app_api_service, system_server_service, service_manager_type;
type webviewupdate_service, app_api_service, system_server_service, service_manager_type;
type wifip2p_service, app_api_service, system_server_service, service_manager_type;
--
GitLab