Files
device_google_wahoo/sepolicy/per_proxy.te
Alex Klyubin ba3d873cf8 Annotate violators of "no Binder in vendor" rule
These vendor domains use Binder, which is not permitted. This commit
thus temporarily associates these domains with
binder_in_vendor_violators attribute which permits the domains to use
Binder. This is a temporary workaround. The fix is to fix these domains
to not use Binder.

Test: mmm system/sepolicy
Bug: 35870313
Change-Id: I2bc329387bfdcc250a59f5d92419b4349e49c0cf
2017-03-24 08:40:00 -07:00

14 lines
394 B
Plaintext

# Policy for /system/bin/pm-proxy
type per_proxy, domain;
type per_proxy_exec, exec_type, file_type;
init_daemon_domain(per_proxy)
allow per_proxy per_mgr_service:service_manager find;
r_dir_file(per_proxy, sysfs_type)
# TODO(b/36570130): Remove this once per_proxy stops using Binder
typeattribute per_proxy binder_in_vendor_violators;
binder_use(per_proxy)
binder_call(per_proxy, per_mgr)