From c496db327ec1d741278d3df1af44da97053c4b25 Mon Sep 17 00:00:00 2001 From: Eugene Susla Date: Thu, 8 Nov 2018 17:37:45 -0800 Subject: [PATCH] Add SELinux service for RoleManagerService Test: ensure no build failures; add RoleManagerService as a boot phase ensure no SecurityException in logcat on boot Change-Id: Ia0803c0fb084fe2b12f5c20f5e46354d0dd1aedf --- private/compat/26.0/26.0.ignore.cil | 1 + private/compat/27.0/27.0.ignore.cil | 1 + private/compat/28.0/28.0.ignore.cil | 1 + private/service_contexts | 1 + public/service.te | 1 + 5 files changed, 5 insertions(+) diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil index 61d734d94..ae9241bcc 100644 --- a/private/compat/26.0/26.0.ignore.cil +++ b/private/compat/26.0/26.0.ignore.cil @@ -131,6 +131,7 @@ perfprofd_service property_info recovery_socket + role_service secure_element secure_element_device secure_element_tmpfs diff --git a/private/compat/27.0/27.0.ignore.cil b/private/compat/27.0/27.0.ignore.cil index c828a565b..f4645ee6f 100644 --- a/private/compat/27.0/27.0.ignore.cil +++ b/private/compat/27.0/27.0.ignore.cil @@ -118,6 +118,7 @@ perfprofd_service property_info recovery_socket + role_service secure_element secure_element_device secure_element_service diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil index 30f231ad1..617291e1f 100644 --- a/private/compat/28.0/28.0.ignore.cil +++ b/private/compat/28.0/28.0.ignore.cil @@ -52,6 +52,7 @@ mnt_product_file overlayfs_file recovery_socket + role_service super_block_device system_lmk_prop system_suspend_hwservice diff --git a/private/service_contexts b/private/service_contexts index de1c2e0af..cdf652161 100644 --- a/private/service_contexts +++ b/private/service_contexts @@ -142,6 +142,7 @@ radio.phone u:object_r:radio_service:s0 radio.sms u:object_r:radio_service:s0 recovery u:object_r:recovery_service:s0 restrictions u:object_r:restrictions_service:s0 +role u:object_r:role_service:s0 rttmanager u:object_r:rttmanager_service:s0 samplingprofiler u:object_r:samplingprofiler_service:s0 scheduling_policy u:object_r:scheduling_policy_service:s0 diff --git a/public/service.te b/public/service.te index 0ea76382a..8024a78cc 100644 --- a/public/service.te +++ b/public/service.te @@ -132,6 +132,7 @@ type procstats_service, app_api_service, ephemeral_app_api_service, system_serve type recovery_service, system_server_service, service_manager_type; type registry_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type restrictions_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; +type role_service, app_api_service, system_server_service, service_manager_type; type rttmanager_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type samplingprofiler_service, system_server_service, service_manager_type; type scheduling_policy_service, system_server_service, service_manager_type;