diff options
Diffstat (limited to 'binderservicedomain.te')
| -rw-r--r-- | binderservicedomain.te | 21 |
1 files changed, 0 insertions, 21 deletions
diff --git a/binderservicedomain.te b/binderservicedomain.te deleted file mode 100644 index 36993eb..0000000 --- a/binderservicedomain.te +++ /dev/null @@ -1,21 +0,0 @@ -# Rules common to all binder service domains - -# Allow dumpstate to collect information from binder services -allow binderservicedomain dumpstate:fd use; -allow binderservicedomain dumpstate:unix_stream_socket { read write getopt getattr }; -allow binderservicedomain shell_data_file:file { getattr write }; - -# Allow dumpsys to work from adb shell or the serial console -allow binderservicedomain devpts:chr_file rw_file_perms; -allow binderservicedomain console_device:chr_file rw_file_perms; - -# Receive and write to a pipe received over Binder from an app. -allow binderservicedomain appdomain:fd use; -allow binderservicedomain appdomain:fifo_file write; - -# allow all services to run permission checks -allow binderservicedomain permission_service:service_manager find; - -allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify }; - -use_keystore(binderservicedomain) |