| Ashwini Oruganti | 9bc8112 | 2019-10-21 15:28:00 -0700 | [diff] [blame] | 1 | ### |
| 2 | ### A domain for further sandboxing the GooglePermissionController app. |
| 3 | ### |
| Ashwini Oruganti | 5064189 | 2019-11-21 12:26:08 -0800 | [diff] [blame] | 4 | type permissioncontroller_app, domain, coredomain; |
| Ashwini Oruganti | 9bc8112 | 2019-10-21 15:28:00 -0700 | [diff] [blame] | 5 | |
| Ashwini Oruganti | 9bc8112 | 2019-10-21 15:28:00 -0700 | [diff] [blame] | 6 | app_domain(permissioncontroller_app) |
| 7 | |
| Hai Zhang | 86e10ef | 2020-12-07 19:42:27 +0000 | [diff] [blame^] | 8 | allow permissioncontroller_app app_api_service:service_manager find; |
| 9 | allow permissioncontroller_app system_api_service:service_manager find; |
| 10 | |
| Ashwini Oruganti | 9bc8112 | 2019-10-21 15:28:00 -0700 | [diff] [blame] | 11 | # Allow interaction with gpuservice |
| 12 | binder_call(permissioncontroller_app, gpuservice) |
| Ashwini Oruganti | 9bc8112 | 2019-10-21 15:28:00 -0700 | [diff] [blame] | 13 | |
| Evan Severson | 1d69ca7 | 2020-05-04 15:13:34 -0700 | [diff] [blame] | 14 | allow permissioncontroller_app radio_service:service_manager find; |
| Ashwini Oruganti | 73e1229 | 2019-12-09 15:37:05 -0800 | [diff] [blame] | 15 | |
| 16 | # Allow the app to request and collect incident reports. |
| 17 | # (Also requires DUMP and PACKAGE_USAGE_STATS permissions) |
| 18 | allow permissioncontroller_app incident_service:service_manager find; |
| 19 | binder_call(permissioncontroller_app, incidentd) |
| 20 | allow permissioncontroller_app incidentd:fifo_file { read write }; |