gs101-sepolicy: add oemrilservice_app.te

Seperate oemrilservice_app.te from vendor_telephony_app.te.
  - target process: com.samsung.slsi.telephony.oemril
  - selabel: oemrilservice_app
  - allow to find app_api_service
  - allow to find radio_service
  - allow to find vendor HAL
  - a binder communication with rild

Bug: 191830874
Test: Manual

Signed-off-by: Sungwoo choi <sungwoo48.choi@samsung.com>
Change-Id: I5e31b4a16f0b4d25bf4889da0150084937354808
This commit is contained in:
Sungwoo choi 2021-06-23 17:25:27 +09:00 committed by terrycrhuang
parent 0b21a2d44a
commit 5aaa0f6044
3 changed files with 11 additions and 0 deletions

View file

@ -0,0 +1,7 @@
type oemrilservice_app, domain;
app_domain(oemrilservice_app)
allow oemrilservice_app app_api_service:service_manager find;
allow oemrilservice_app radio_service:service_manager find;
allow oemrilservice_app hal_exynos_rild_hwservice:hwservice_manager find;
binder_call(oemrilservice_app, rild)

View file

@ -25,6 +25,7 @@ binder_call(rild, platform_app)
binder_call(rild, modem_svc_sit)
binder_call(rild, vendor_ims_app)
binder_call(rild, vendor_rcs_app)
binder_call(rild, oemrilservice_app)
# for hal service
add_hwservice(rild, hal_exynos_rild_hwservice)

View file

@ -6,6 +6,9 @@ user=system seinfo=platform name=com.samsung.slsi.telephony.uartswitch domain=ve
user=system seinfo=platform name=com.samsung.slsi.sysdebugmode domain=vendor_telephony_app levelFrom=all
user=system seinfo=platform name=com.samsung.slsi.telephony.networktestmode domain=vendor_telephony_app levelFrom=all
# oemrilservice
user=_app isPrivApp=true name=com.samsung.slsi.telephony.oemril domain=oemrilservice_app levelFrom=all
# Samsung S.LSI IMS
user=_app isPrivApp=true name=com.shannon.imsservice domain=vendor_ims_app levelFrom=all
user=_app isPrivApp=true name=com.shannon.imsservice:remote domain=vendor_ims_app levelFrom=all