4b9114a0b5
In order for services registered with LazyServiceRegistrar to dynamically stop, servicemanager needs to be able to call into client processes (to notify them and trigger shutdown). Bug: 143108344 Test: aidl_lazy_test Change-Id: I402d0bcc5e668bf022162c7ce7393d5b77256479
16 lines
546 B
Plaintext
16 lines
546 B
Plaintext
# apexd -- manager for APEX packages
|
|
type apexd, domain;
|
|
type apexd_exec, exec_type, file_type, system_file_type;
|
|
|
|
binder_use(apexd)
|
|
add_service(apexd, apex_service)
|
|
set_prop(apexd, apexd_prop)
|
|
|
|
neverallow { domain -init -apexd -system_server } apex_service:service_manager find;
|
|
neverallow { domain -init -apexd -system_server -servicemanager } apexd:binder call;
|
|
|
|
neverallow { domain userdebug_or_eng(`-crash_dump') } apexd:process ptrace;
|
|
|
|
# only apexd can set apexd sysprop
|
|
neverallow { domain -apexd -init } apexd_prop:property_service set;
|