diff options
| author | Tao Bao <tbao@google.com> | 2016-02-03 12:43:58 -0800 |
|---|---|---|
| committer | Tao Bao <tbao@google.com> | 2016-02-22 18:37:38 +0000 |
| commit | 65b5fde912285ebeeefc9c7486f4453dd86d994f (patch) | |
| tree | 1909c26ab26d3dfbd1b38ce7ed7a250ca66bdc97 | |
| parent | 6b843bcff0c7560dec2aef6fd6d31e8cc9d67f0f (diff) | |
| download | sepolicy-65b5fde912285ebeeefc9c7486f4453dd86d994f.tar.gz | |
Add recovery service.brillo-m10-releasebrillo-m10-dev
RecoverySystemService is separated from PowerManagerService as a
dedicated system service to handle recovery related requests (such as
invoking uncrypt to uncrypt an OTA package on /data or to set up /
clear the bootloader control block (i.e. /misc) and etc).
The matching CL in frameworks/base is in:
Change-Id: Ic606fcf5b31c54ce54f0ab12c1768fef0fa64560.
Bug: 26830925
Change-Id: Iee0583c458f784bfa422d0f7af5d1f2681d9609e
| -rw-r--r-- | priv_app.te | 1 | ||||
| -rw-r--r-- | service.te | 1 | ||||
| -rw-r--r-- | service_contexts | 1 |
3 files changed, 3 insertions, 0 deletions
diff --git a/priv_app.te b/priv_app.te index e300d45..9146263 100644 --- a/priv_app.te +++ b/priv_app.te @@ -27,6 +27,7 @@ allow priv_app surfaceflinger_service:service_manager find; allow priv_app app_api_service:service_manager find; allow priv_app system_api_service:service_manager find; allow priv_app persistent_data_block_service:service_manager find; +allow priv_app recovery_service:service_manager find; # Traverse into /mnt/media_rw for bypassing FUSE daemon # TODO: narrow this to just MediaProvider @@ -75,6 +75,7 @@ type power_service, app_api_service, system_server_service, service_manager_type type print_service, app_api_service, system_server_service, service_manager_type; type processinfo_service, system_server_service, service_manager_type; type procstats_service, app_api_service, system_server_service, service_manager_type; +type recovery_service, system_server_service, service_manager_type; type registry_service, app_api_service, system_server_service, service_manager_type; type restrictions_service, app_api_service, system_server_service, service_manager_type; type rttmanager_service, app_api_service, system_server_service, service_manager_type; diff --git a/service_contexts b/service_contexts index 5cab2d3..8ff12f8 100644 --- a/service_contexts +++ b/service_contexts @@ -96,6 +96,7 @@ procstats u:object_r:procstats_service:s0 radio.phonesubinfo u:object_r:radio_service:s0 radio.phone u:object_r:radio_service:s0 radio.sms u:object_r:radio_service:s0 +recovery u:object_r:recovery_service:s0 restrictions u:object_r:restrictions_service:s0 rttmanager u:object_r:rttmanager_service:s0 samplingprofiler u:object_r:samplingprofiler_service:s0 |