| commit | 5f154404deef6bf37200512f0c18f043156a6c4f | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Wed Dec 19 13:36:53 2018 -0800 |
| committer | Nick Kralevich <nnk@google.com> | Wed Dec 19 13:44:22 2018 -0800 |
| tree | d4633a604b1c13d2dcc3d5edfe361ab842d392dc | |
| parent | 3361ec4358b7aeea8fabdbbf26d864c364bc0eeb [diff] |
Ensure that service_manager adds / finds make sense. Add a neverallow rule asserting that services registered or queried through servicemanager must have the attribute service_manager_type or vndservice_manager_type. Attempting to add or query a service which does not have one of those attributes is malformed policy. See https://android-review.googlesource.com/c/platform/system/sepolicy/+/826500/7/private/system_server.te#696 as an example where this occurred. Test: compiles Change-Id: I339bde04b80819b07832d96797fd7f477a4b676a