Allow twoshay to access fwk_stats_service and system_server

avc:  denied  { find } for pid=813 uid=0
name=android.frameworks.stats.IStats/default scontext=u:r:twoshay:s0
tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager

avc: denied { call } for scontext=u:r:twoshay:s0
tcontext=u:r:system_server:s0 tclass=binder

Bug: 179334953
Test: Make selinux_policy and push related files to the device.

Signed-off-by: davidycchen <davidycchen@google.com>
Change-Id: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
Merged-In: Ib95debbc9ce10919c5f935e8f70b340bb293b54a
This commit is contained in:
davidycchen 2021-06-15 16:06:33 +08:00
parent 239bcceb78
commit c0922582bc

View file

@ -11,3 +11,6 @@ add_service(twoshay, touch_context_service)
# b/193224954
dontaudit twoshay twoshay:capability dac_override;
allow twoshay fwk_stats_service:service_manager find;
binder_call(twoshay, stats_service_server)