Skip to content
Snippets Groups Projects
Commit bba18381 authored by dcashman's avatar dcashman
Browse files

Allow radio access to drmserver_service.

Address the following denial:
SELinux  E  avc:  denied  { find } for service=drm.drmManager scontext=u:r:radio:s0 tcontext=u:object_r:drmserver_service:s0

which occurs when a non-default SMS app sends an MMS. The message would be
stored into system automatically in MMS service (from phone process and phone
UID). The storing of the message involves the creation of
android.drm.DrmManagerClient instance.

Change-Id: Ic4e493f183c9ce7f7ac3f74f6ea062893ea67608
parent 3c77d4d1
No related branches found
No related tags found
No related merge requests found
...@@ -31,6 +31,7 @@ auditallow radio system_radio_prop:property_service set; ...@@ -31,6 +31,7 @@ auditallow radio system_radio_prop:property_service set;
# ctl interface # ctl interface
allow radio ctl_rildaemon_prop:property_service set; allow radio ctl_rildaemon_prop:property_service set;
allow radio drmserver_service:service_manager find;
allow radio mediaserver_service:service_manager find; allow radio mediaserver_service:service_manager find;
allow radio radio_service:service_manager { add find }; allow radio radio_service:service_manager { add find };
allow radio surfaceflinger_service:service_manager find; allow radio surfaceflinger_service:service_manager find;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment