Add sepolicy for resolver service
Bug: 126141549
Test: built, flashed, booted
Change-Id: I34260e1e5cc238fbe92574f928252680c1e6b417
diff --git a/private/system_app.te b/private/system_app.te
index 3f0d335..27e8ef1 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -74,6 +74,7 @@
allow system_app {
service_manager_type
-apex_service
+ -dnsresolver_service
-dumpstate_service
-installd_service
-iorapd_service
@@ -85,6 +86,7 @@
}:service_manager find;
# suppress denials for services system_app should not be accessing.
dontaudit system_app {
+ dnsresolver_service
dumpstate_service
installd_service
iorapd_service