selinux move aocx from vndservice to service

When updating aocx service to use binder ndk backend, we get this
selinux violation:

SELinux : avc:  denied  { add } for pid=2772 uid=0 name=aocx.IAocx scontext=u:r:aocxd:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0

TEST:
adb push out/target/product/tangorpro/vendor/etc/selinux/* /vendor/etc/selinux
adb reboot
adb shell aocx_tool list

BUG: 343998265
Change-Id: I1e4f554abfe02f33328c851f7da64c671d8f4cb7
This commit is contained in:
Bruce Po 2024-05-31 11:51:10 -07:00
parent 65a5fe99c1
commit 1f7c89e359
3 changed files with 1 additions and 1 deletions

1
aoc/sepolicy/service.te Normal file
View file

@ -0,0 +1 @@
type aocx, service_manager_type;

View file

@ -1 +0,0 @@
type aocx, vndservice_manager_type;