diff --git a/common/private/netd.te b/common/private/netd.te new file mode 100644 index 0000000000000000000000000000000000000000..bc717188e6953f3d82af3fb69fad04a656d9e115 --- /dev/null +++ b/common/private/netd.te @@ -0,0 +1 @@ +allow netd platform_app:unix_stream_socket connectto; diff --git a/common/private/platform_app.te b/common/private/platform_app.te index 07183e7249bf2847ecbb03f89d3f60e5b56e32be..9c14c8fdafc7edb3ff89bcf59b2640457bff8153 100644 --- a/common/private/platform_app.te +++ b/common/private/platform_app.te @@ -9,3 +9,12 @@ hal_client_domain(platform_app, hal_lineage_livedisplay) # Allow PowerShare HAL service to be found hal_client_domain(platform_app, hal_lineage_powershare) + +# allow platform_app to create named pipes (used for realm support) +allow platform_app fuse:fifo_file create; +allow platform_app app_data_file:fifo_file create_file_perms; +allow platform_app app_data_file:fifo_file open; +allow platform_app rs_exec:file rx_file_perms; + +# Allow platform apps to execute files in /data +allow platform_app app_data_file:file execute; diff --git a/common/private/service.te b/common/private/service.te index 053d448fea02a29d98e27313c3d540127d9e7da9..00de95ac1bb87eafa59c846c994c71655e2bcfaf 100644 --- a/common/private/service.te +++ b/common/private/service.te @@ -4,3 +4,4 @@ type lineage_globalactions_service, system_api_service, system_server_service, s type lineage_livedisplay_service, system_api_service, system_server_service, service_manager_type; type lineage_profile_service, system_api_service, system_server_service, service_manager_type; type lineage_trust_service, system_api_service, system_server_service, service_manager_type; +type lineage_weather_service, system_api_service, system_server_service, service_manager_type; diff --git a/common/private/service_contexts b/common/private/service_contexts index 633c6ac3aa23d4243a7560ec28ca8f55258e0f24..c859222773310a0298857d7dac487465add3e3e1 100644 --- a/common/private/service_contexts +++ b/common/private/service_contexts @@ -2,6 +2,7 @@ lineageglobalactions u:object_r:lineage_globalactions_servi lineagehardware u:object_r:lineage_hardware_service:s0 lineagelivedisplay u:object_r:lineage_livedisplay_service:s0 lineagetrust u:object_r:lineage_trust_service:s0 +lineageweather u:object_r:lineage_weather_service:s0 profile u:object_r:lineage_profile_service:s0 adbroot_service u:object_r:adbroot_service:s0 diff --git a/common/private/untrusted_app.te b/common/private/untrusted_app.te index 77959f692368b6fd70f411cbb4bf115cf46b1920..39d2b4b959a5611aadf05f726aea50cf494b6b28 100644 --- a/common/private/untrusted_app.te +++ b/common/private/untrusted_app.te @@ -1 +1,2 @@ allow untrusted_app_all lineage_profile_service:service_manager find; +allow untrusted_app_all lineage_weather_service:service_manager find;