Fix avc denied for vendor telephony debug app am: b69195ebe9

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/19600258

Change-Id: I26041b2e32da5bdf97c24deb1a70e1e1e594060d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Jinting Lin 2022-08-24 03:50:30 +00:00 committed by Automerger Merge Worker
commit fbbcaeb8d2
4 changed files with 22 additions and 0 deletions

View file

@ -34,3 +34,5 @@ system_vendor_config_prop(vendor_uwb_calibration_prop)
# Dynamic sensor
vendor_internal_prop(vendor_dynamic_sensor_prop)
# Telephony debug app
vendor_internal_prop(vendor_telephony_app_prop)

View file

@ -103,3 +103,6 @@ vendor.dynamic_sensor. u:object_r:vendor_dynamic_sensor_prop
# for ims service
persist.vendor.ims. u:object_r:vendor_imssvc_prop:s0
# for vendor telephony debug app
vendor.config.debug. u:object_r:vendor_telephony_app_prop:s0

View file

@ -26,6 +26,7 @@ binder_call(rild, oemrilservice_app)
binder_call(rild, hal_secure_element_uicc)
binder_call(rild, grilservice_app)
binder_call(rild, vendor_engineermode_app)
binder_call(rild, vendor_telephony_debug_app)
# for hal service
add_hwservice(rild, hal_exynos_rild_hwservice)

View file

@ -2,3 +2,19 @@ type vendor_telephony_debug_app, domain;
app_domain(vendor_telephony_debug_app)
allow vendor_telephony_debug_app app_api_service:service_manager find;
allow vendor_telephony_debug_app hal_exynos_rild_hwservice:hwservice_manager find;
binder_call(vendor_telephony_debug_app, rild)
# RIL property
set_prop(vendor_telephony_debug_app, vendor_rild_prop)
# Debug property
set_prop(vendor_telephony_debug_app, vendor_telephony_app_prop)
userdebug_or_eng(`
# System Debug Mode
dontaudit vendor_telephony_debug_app system_app_data_file:dir create_dir_perms;
dontaudit vendor_telephony_debug_app system_app_data_file:file create_file_perms;
dontaudit vendor_telephony_debug_app default_prop:file r_file_perms;
')