commit affe2399b53911cc87666931526b6c7d24b83a9c
author Nick Moukhine <oni@google.com> Fri Sep 18 09:47:05 2020 +0200
committer Nick Moukhine <oni@google.com> Wed Sep 23 10:57:19 2020 +0000
tree 369f857792c852147f7db0d533d767fc1a2b57a7
parent 7be9e9e372c70a5518f729a0cdcb0d39a28be377

Add sepolicy for music recognition service.

Denial when not listed in priv_app.te:
E SELinux : avc:  denied  { find } for pid=3213 uid=10170 name=music_recognition scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:music_recognition_service:s0 tclass=service_manager permissive=0


Bug: 158194857
Test: patched and tested on internal master
Change-Id: I30e9ea79a57d9c353b732b629bd5a829c89bbcb0

private/service_contexts

diff --git a/private/service_contexts b/private/service_contexts
index 0b6492c..7616f19 100644
--- a/private/service_contexts
+++ b/private/service_contexts
@@ -149,6 +149,7 @@
 meminfo                                   u:object_r:meminfo_service:s0
 midi                                      u:object_r:midi_service:s0
 mount                                     u:object_r:mount_service:s0
+music_recognition                         u:object_r:music_recognition_service:s0
 netd                                      u:object_r:netd_service:s0
 netpolicy                                 u:object_r:netpolicy_service:s0
 netstats                                  u:object_r:netstats_service:s0