2017-03-21 16:01:52 -07:00
|
|
|
# vndservicemanager - the Binder context manager for vendor processes
|
|
|
|
type vndservicemanager_exec, exec_type, file_type;
|
|
|
|
|
|
|
|
init_daemon_domain(vndservicemanager);
|
|
|
|
|
|
|
|
allow vndservicemanager self:binder set_context_mgr;
|
|
|
|
|
|
|
|
# transfer binder objects to other processes (TODO b/35870313 limit this to vendor-only)
|
2017-03-23 14:27:32 -07:00
|
|
|
allow vndservicemanager { domain -coredomain -init }:binder transfer;
|
2017-03-21 16:01:52 -07:00
|
|
|
|
|
|
|
allow vndservicemanager vndbinder_device:chr_file rw_file_perms;
|
|
|
|
|
|
|
|
# Check SELinux permissions.
|
|
|
|
selinux_check_access(vndservicemanager)
|