Merge "Ensure that service_manager adds / finds make sense." am: c2be630c3a am: 2c9fca3127
am: f8f835fed8
Change-Id: I9aef0811516968d82ef464e2374b845972bdd696
diff --git a/public/service.te b/public/service.te
index 79b049b..507f8b2 100644
--- a/public/service.te
+++ b/public/service.te
@@ -181,3 +181,12 @@
type window_service, system_api_service, system_server_service, service_manager_type;
type inputflinger_service, system_api_service, system_server_service, service_manager_type;
type wpantund_service, system_api_service, service_manager_type;
+
+###
+### Neverallow rules
+###
+
+# servicemanager handles registering or looking up named services.
+# It does not make sense to register or lookup something which is not a service.
+# Trigger a compile error if this occurs.
+neverallow domain ~{ service_manager_type vndservice_manager_type }:service_manager { add find };