Loading cmds/servicemanager/Android.mk +1 −1 Original line number Diff line number Diff line Loading @@ -18,7 +18,7 @@ LOCAL_MODULE_TAGS := optional include $(BUILD_EXECUTABLE) include $(CLEAR_VARS) LOCAL_SHARED_LIBRARIES := liblog libselinux LOCAL_SHARED_LIBRARIES := liblog libcutils libselinux LOCAL_SRC_FILES := service_manager.c binder.c LOCAL_CFLAGS += $(svc_c_flags) LOCAL_MODULE := servicemanager Loading cmds/servicemanager/service_manager.c +7 −0 Original line number Diff line number Diff line Loading @@ -8,6 +8,8 @@ #include <stdlib.h> #include <string.h> #include <cutils/multiuser.h> #include <private/android_filesystem_config.h> #include <selinux/android.h> Loading Loading @@ -121,6 +123,11 @@ static bool check_mac_perms_from_lookup(pid_t spid, uid_t uid, const char *perm, static int svc_can_register(const uint16_t *name, size_t name_len, pid_t spid, uid_t uid) { const char *perm = "add"; if (multiuser_get_app_id(uid) >= AID_APP) { return 0; /* Don't allow apps to register services */ } return check_mac_perms_from_lookup(spid, uid, perm, str8(name, name_len)) ? 1 : 0; } Loading Loading
cmds/servicemanager/Android.mk +1 −1 Original line number Diff line number Diff line Loading @@ -18,7 +18,7 @@ LOCAL_MODULE_TAGS := optional include $(BUILD_EXECUTABLE) include $(CLEAR_VARS) LOCAL_SHARED_LIBRARIES := liblog libselinux LOCAL_SHARED_LIBRARIES := liblog libcutils libselinux LOCAL_SRC_FILES := service_manager.c binder.c LOCAL_CFLAGS += $(svc_c_flags) LOCAL_MODULE := servicemanager Loading
cmds/servicemanager/service_manager.c +7 −0 Original line number Diff line number Diff line Loading @@ -8,6 +8,8 @@ #include <stdlib.h> #include <string.h> #include <cutils/multiuser.h> #include <private/android_filesystem_config.h> #include <selinux/android.h> Loading Loading @@ -121,6 +123,11 @@ static bool check_mac_perms_from_lookup(pid_t spid, uid_t uid, const char *perm, static int svc_can_register(const uint16_t *name, size_t name_len, pid_t spid, uid_t uid) { const char *perm = "add"; if (multiuser_get_app_id(uid) >= AID_APP) { return 0; /* Don't allow apps to register services */ } return check_mac_perms_from_lookup(spid, uid, perm, str8(name, name_len)) ? 1 : 0; } Loading