commit cf38ca5ed05e728cdcb5bce0f3c4a67e72005045
author yro <yro@google.com> Mon Jan 22 13:56:41 2018 -0800
committer Howard Ro <yro@google.com> Wed Jan 24 18:25:04 2018 +0000
tree 12fd23ec157505a587eb964eeffbb403aa935caa
parent 97c56bdd78629cb3a57acdbd27d977f1cc6eed4b

Update sepolicy of statsd to be able to find incident_service

Test: manual testing
Change-Id: Ia97c956c08d2062af6b33622c6b61ca3810b0cb1

private/incidentd.te

diff --git a/private/incidentd.te b/private/incidentd.te
index b885263..a887a61 100644
--- a/private/incidentd.te
+++ b/private/incidentd.te
@@ -99,7 +99,14 @@
 ###
 
 # only system_server, system_app and incident command can find the incident service
-neverallow { domain -system_server -system_app -incident -incidentd } incident_service:service_manager find;
+neverallow {
+  domain
+  -incident
+  -incidentd
+  -statsd
+  -system_app
+  -system_server
+} incident_service:service_manager find;
 
 # only incidentd and the other root services in limited circumstances
 # can get to the files in /data/misc/incidents