From 5ce4700d6f22cd16dae3d37b215e304117755a69 Mon Sep 17 00:00:00 2001 From: mikeyuewang Date: Fri, 26 Apr 2024 17:02:26 +0000 Subject: [PATCH] [PMS]Add context for PixelModemService and allow the access to shared modem service. Bug: 335490443 Change-Id: Ie5c6b0191775d42d402632c46c34cafe77fe5e60 --- radio/pixel_modem_app.te | 10 ++++++++++ radio/seapp_contexts | 3 +++ 2 files changed, 13 insertions(+) create mode 100644 radio/pixel_modem_app.te diff --git a/radio/pixel_modem_app.te b/radio/pixel_modem_app.te new file mode 100644 index 0000000..2fbe536 --- /dev/null +++ b/radio/pixel_modem_app.te @@ -0,0 +1,10 @@ +# pixel_modem_app is the selinux domain for pixel_modem_service + +type pixel_modem_app, domain; + +app_domain(pixel_modem_app) + +allow pixel_modem_app app_api_service:service_manager find; + +# Allow the pixel_modem_app to find and call shared modem platform service. +hal_client_domain(pixel_modem_app, hal_shared_modem_platform) diff --git a/radio/seapp_contexts b/radio/seapp_contexts index 82d71dc..7ed10c6 100644 --- a/radio/seapp_contexts +++ b/radio/seapp_contexts @@ -32,3 +32,6 @@ user=system seinfo=platform name=com.google.android.CatEngine domain=cat_engine_ # Vendor Satellite Service user=_app isPrivApp=true seinfo=platform name=com.samsung.slsi.telephony.satelliteservice domain=vendor_satellite_service levelFrom=all + +# Domain for pixel_modem_app +user=_app isPrivApp=true seinfo=platform name=com.google.android.modem.pms domain=pixel_modem_app levelFrom=all