commit 4339a83c0f840fcfaa0bcd45f0aeb2d3d7675b63
author Martijn Coenen <maco@google.com> Thu Apr 06 13:05:27 2017 -0700
committer Martijn Coenen <maco@google.com> Thu Apr 06 13:06:15 2017 -0700
tree 4395c6c1a0f0009ee05132538464c3cc4e370cbf
parent 4f20f9cf3268dad96d9064dcb0e4a11aae96f6f3

vndservicemanager: use separate SELinux class.

For doing access control.

Bug: 36052864
Test: device boots
Change-Id: I263679ed4532ec52b1e64e5e60bdc064b7484073

cmds/servicemanager/service_manager.c

diff --git a/cmds/servicemanager/service_manager.c b/cmds/servicemanager/service_manager.c
index 45bb1d0..1f56a47 100644
--- a/cmds/servicemanager/service_manager.c
+++ b/cmds/servicemanager/service_manager.c
@@ -65,7 +65,11 @@
 static bool check_mac_perms(pid_t spid, uid_t uid, const char *tctx, const char *perm, const char *name)
 {
     char *sctx = NULL;
+#ifdef VENDORSERVICEMANAGER
+    const char *class = "vndservice_manager";
+#else
     const char *class = "service_manager";
+#endif
     bool allowed;
     struct audit_data ad;