DMD MDS: register proxy service and update MDS policy.

MDS is a privileged app which get its permissions from `privapp-permissions-google-product.xml`, however, part of this work requires custom SEPolicy and so those permissions have been translated in SEPolicy.

Test: Manually flash device
Bug: 270279779
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:022dd13252865e131127da6596f5ada71fbf104f)
Merged-In: I47c1a1163a7d40089d36960ed11822505a7a0a7a
Change-Id: I47c1a1163a7d40089d36960ed11822505a7a0a7a
This commit is contained in:
kierancyphus 2023-05-05 16:14:32 +08:00 committed by Kieran Cyphus
parent 41a2c13c6a
commit 2f5496582d
4 changed files with 14 additions and 0 deletions

View file

@ -30,3 +30,9 @@ binder_call(dmd, hwservicemanager)
binder_call(dmd, modem_diagnostic_app)
binder_call(dmd, modem_logging_control)
binder_call(dmd, vendor_telephony_silentlogging_app)
# Allow proxy to register as android Service
binder_use(dmd)
add_service(dmd, liboemservice_proxy)
allow dmd radio_vendor_data_file:dir create_dir_perms;
allow dmd radio_vendor_data_file:file create_file_perms;

View file

@ -34,4 +34,8 @@ userdebug_or_eng(`
allow modem_diagnostic_app sysfs_batteryinfo:dir search;
dontaudit modem_diagnostic_app default_prop:file r_file_perms;
# Modem Log Mask Library Permissions
binder_call(modem_diagnostic_app, liboemservice_proxy)
allow modem_diagnostic_app liboemservice_proxy:service_manager find;
')

View file

@ -1,2 +1,4 @@
telephony.oem.oemrilhook u:object_r:radio_service:s0
# DMD oemservice aidl proxy
com.google.pixel.modem.logmasklibrary.ILiboemserviceProxy/default u:object_r:liboemservice_proxy:s0

2
radio/service.te Normal file
View file

@ -0,0 +1,2 @@
# dmd liboemservice_proxy
type liboemservice_proxy, hal_service_type, service_manager_type;