commit e25588fba8a92da40c69a87658284874f3ea0b5b
author dcashman <dcashman@google.com> Thu Oct 29 22:29:56 2015 +0000
committer android-build-merger <android-build-merger@google.com> Thu Oct 29 22:29:56 2015 +0000
tree db7778ece5304556565fe5b7321b2eeee4b3eacb
parent 4c445999d1e60bdae8961ffc0c3ec4a9c0269aa0
parent 000b69499aa233a7277b828756c01b27a47b17ce

Enable permission checking by binderservicedomain.
am: 000b69499a

* commit '000b69499aa233a7277b828756c01b27a47b17ce':
  Enable permission checking by binderservicedomain.

binderservicedomain.te

diff --git a/binderservicedomain.te b/binderservicedomain.te
index 0bfd33a..36993eb 100644
--- a/binderservicedomain.te
+++ b/binderservicedomain.te
@@ -13,6 +13,9 @@
 allow binderservicedomain appdomain:fd use;
 allow binderservicedomain appdomain:fifo_file write;
 
+# allow all services to run permission checks
+allow binderservicedomain permission_service:service_manager find;
+
 allow binderservicedomain keystore:keystore_key { get_state get insert delete exist list sign verify };
 
 use_keystore(binderservicedomain)