replicant-frameworks_native/cmds/servicemanager
Nick Kralevich b27bbd18bb service_manager: reorder permission checks for find
Reorder the find permission checks. This avoids generating misleading
SELinux denials when a service doesn't exist, or when a service is
prohibited to isolated apps.

The original reason for structuring the code this way is explained
in https://android-review.googlesource.com/#/c/100530/4/cmds/servicemanager/service_manager.c@172
The concern at the time was to avoid leaking a situation where
a caller could probe for the existance of a service. This turns out
to be unnecessary. The same return value is used for both a
permission denied and a service not found. The only side effect
is the generation of an SELinux audit log, which likely won't be
accessible to the calling application.

Change-Id: I9760e1821ed16102fa5f9bec07f8c34944565be9
2015-03-05 10:58:40 -08:00
..
Android.mk Add SELinux checks when adding a service. 2014-06-12 20:46:24 +00:00
bctest.c Add missing includes. 2015-01-29 22:32:32 -08:00
binder.c Add missing includes. 2015-01-29 22:32:32 -08:00
binder.h
service_manager.c service_manager: reorder permission checks for find 2015-03-05 10:58:40 -08:00