Skip to content
Snippets Groups Projects
Commit cf38ca5e authored by yro's avatar yro Committed by Howard Ro
Browse files

Update sepolicy of statsd to be able to find incident_service

Test: manual testing
Change-Id: Ia97c956c08d2062af6b33622c6b61ca3810b0cb1
parent 97c56bdd
No related branches found
No related tags found
No related merge requests found
...@@ -99,7 +99,14 @@ binder_call(incidentd, incident) ...@@ -99,7 +99,14 @@ binder_call(incidentd, incident)
### ###
# only system_server, system_app and incident command can find the incident service # only system_server, system_app and incident command can find the incident service
neverallow { domain -system_server -system_app -incident -incidentd } incident_service:service_manager find; neverallow {
domain
-incident
-incidentd
-statsd
-system_app
-system_server
} incident_service:service_manager find;
# only incidentd and the other root services in limited circumstances # only incidentd and the other root services in limited circumstances
# can get to the files in /data/misc/incidents # can get to the files in /data/misc/incidents
......
...@@ -41,8 +41,9 @@ unix_socket_connect(statsd, traced_consumer, traced) ...@@ -41,8 +41,9 @@ unix_socket_connect(statsd, traced_consumer, traced)
# Grant statsd with permissions to register the services. # Grant statsd with permissions to register the services.
allow statsd { allow statsd {
statscompanion_service
app_api_service app_api_service
incident_service
statscompanion_service
system_api_service system_api_service
}:service_manager find; }:service_manager find;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment