Merge "Ensure that service_manager adds / finds make sense." am: c2be630c3a
am: 2c9fca3127
Change-Id: I6bbd357754c487873bea427fe113452f764c7098
diff --git a/public/service.te b/public/service.te
index c0be878..1864883 100644
--- a/public/service.te
+++ b/public/service.te
@@ -180,3 +180,12 @@
type window_service, system_api_service, system_server_service, service_manager_type;
type inputflinger_service, system_api_service, system_server_service, service_manager_type;
type wpantund_service, system_api_service, service_manager_type;
+
+###
+### Neverallow rules
+###
+
+# servicemanager handles registering or looking up named services.
+# It does not make sense to register or lookup something which is not a service.
+# Trigger a compile error if this occurs.
+neverallow domain ~{ service_manager_type vndservice_manager_type }:service_manager { add find };