commit 8c30684c43d6302cf88f9e117fc871519951998b
author dcashman <dcashman@google.com> Thu Oct 29 20:21:58 2015 +0000
committer android-build-merger <android-build-merger@google.com> Thu Oct 29 20:21:58 2015 +0000
tree 8ad319c7ab7ae9a59d3ece048a8bb52aef8389fb
parent 34ef55c0fb00aee6f8cf3a616abf36107e598ff8
parent 1c749e0769b7d0dbe510b9d77d1b81cd817956d4

Enable permission checking by binderservicedomain. am: 32d207e042
am: 1c749e0769

* commit '1c749e0769b7d0dbe510b9d77d1b81cd817956d4':
  Enable permission checking by binderservicedomain.

binderservicedomain.te

diff --git a/binderservicedomain.te b/binderservicedomain.te
index 0bfd33a..36993eb 100644
--- a/binderservicedomain.te
+++ b/binderservicedomain.te
@@ -13,6 +13,9 @@
 allow binderservicedomain appdomain:fd use;
 allow binderservicedomain appdomain:fifo_file write;
 
+# allow all services to run permission checks
+allow binderservicedomain permission_service:service_manager find;
+
 allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify };
 
 use_keystore(binderservicedomain)