Merge "Fix avc denied in OMA DM" into sc-dev am: d2cee097f8

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13816043

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: I4c471c8e3d6d29082744dc044fb22af6849411b2
This commit is contained in:
TreeHugger Robot 2021-03-10 16:37:32 +00:00 committed by Automerger Merge Worker
commit 72cfb31ebe
2 changed files with 13 additions and 0 deletions

10
whitechapel/vendor/google/omadm.te vendored Normal file
View file

@ -0,0 +1,10 @@
# OMADM app
type omadm_app, domain;
app_domain(omadm_app)
net_domain(omadm_app)
allow omadm_app radio_vendor_data_file:dir rw_dir_perms;
allow omadm_app radio_vendor_data_file:file create_file_perms;
allow omadm_app app_api_service:service_manager find;
allow omadm_app radio_service:service_manager find;

View file

@ -28,3 +28,6 @@ user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app
# Hardware Info Collection
user=_app isPrivApp=true name=com.google.android.hardwareinfo domain=hardware_info_app type=app_data_file levelFrom=user
# Domain for omadm
user=_app isPrivApp=true seinfo=platform name=com.android.omadm.service domain=omadm_app type=app_data_file levelFrom=all