DMD MDS: register proxy service and update MDS policy.
MDS is a privileged app which get its permissions from `privapp-permissions-google-product.xml`, however, part of this work requires custom SEPolicy and so those permissions have been translated in SEPolicy. Test: Manually flash device Bug: 270279779 (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:022dd13252865e131127da6596f5ada71fbf104f) Merged-In: I47c1a1163a7d40089d36960ed11822505a7a0a7a Change-Id: I47c1a1163a7d40089d36960ed11822505a7a0a7a
This commit is contained in:
parent
41a2c13c6a
commit
2f5496582d
4 changed files with 14 additions and 0 deletions
|
@ -30,3 +30,9 @@ binder_call(dmd, hwservicemanager)
|
|||
binder_call(dmd, modem_diagnostic_app)
|
||||
binder_call(dmd, modem_logging_control)
|
||||
binder_call(dmd, vendor_telephony_silentlogging_app)
|
||||
|
||||
# Allow proxy to register as android Service
|
||||
binder_use(dmd)
|
||||
add_service(dmd, liboemservice_proxy)
|
||||
allow dmd radio_vendor_data_file:dir create_dir_perms;
|
||||
allow dmd radio_vendor_data_file:file create_file_perms;
|
||||
|
|
|
@ -34,4 +34,8 @@ userdebug_or_eng(`
|
|||
allow modem_diagnostic_app sysfs_batteryinfo:dir search;
|
||||
|
||||
dontaudit modem_diagnostic_app default_prop:file r_file_perms;
|
||||
|
||||
# Modem Log Mask Library Permissions
|
||||
binder_call(modem_diagnostic_app, liboemservice_proxy)
|
||||
allow modem_diagnostic_app liboemservice_proxy:service_manager find;
|
||||
')
|
||||
|
|
|
@ -1,2 +1,4 @@
|
|||
telephony.oem.oemrilhook u:object_r:radio_service:s0
|
||||
|
||||
# DMD oemservice aidl proxy
|
||||
com.google.pixel.modem.logmasklibrary.ILiboemserviceProxy/default u:object_r:liboemservice_proxy:s0
|
||||
|
|
2
radio/service.te
Normal file
2
radio/service.te
Normal file
|
@ -0,0 +1,2 @@
|
|||
# dmd liboemservice_proxy
|
||||
type liboemservice_proxy, hal_service_type, service_manager_type;
|
Loading…
Add table
Add a link
Reference in a new issue