Add SELinux rules for MDS app

Bug: 63147021
Test: Verify app can run and access diag interface
Change-Id: I6aaadd5af6508aee8229968636e4f76c8c957d5e
This commit is contained in:
Jie Song
2017-07-17 16:26:24 -07:00
parent 8c95bb932b
commit a48092ad06
2 changed files with 15 additions and 0 deletions

14
sepolicy/vendor/mds_app.te vendored Normal file
View File

@@ -0,0 +1,14 @@
type mds_app, domain;
app_domain(mds_app)
userdebug_or_eng(`
net_domain(mds_app)
allow mds_app app_api_service:service_manager find;
allow mds_app surfaceflinger_service:service_manager find;
allow mds_app diag_device:chr_file rw_file_perms;
set_prop(mds_app, modem_diag_prop)
')

View File

@@ -1,6 +1,7 @@
user=system seinfo=platform name=com.google.SSRestartDetector domain=ssr_detector_app type=system_app_data_file
user=_app seinfo=platform name=com.android.nexuslogger domain=logger_app type=app_data_file levelFrom=all
user=_app seinfo=platform name=com.android.ramdump domain=ramdump_app type=app_data_file levelFrom=all
user=_app seinfo=platform name=com.google.mds domain=mds_app type=app_data_file levelFrom=all
#Add new domain for DataServices
#TODO Remove user "system" when b/38043081 is resolved