summaryrefslogtreecommitdiff
path: root/libs/gui/ConsumerBase.cpp
diff options
context:
space:
mode:
author Nick Kralevich <nnk@google.com> 2015-03-05 10:58:40 -0800
committer Nick Kralevich <nnk@google.com> 2015-03-05 10:58:40 -0800
commitb27bbd18bb65b3744ae066fcd6826285dec8b469 (patch)
treed9be7b31487bf24e371f953ee2f14bf48e583806 /libs/gui/ConsumerBase.cpp
parent9d68ed0ecd3a101c13a163cfe730b13b1564b442 (diff)
service_manager: reorder permission checks for find
Reorder the find permission checks. This avoids generating misleading SELinux denials when a service doesn't exist, or when a service is prohibited to isolated apps. The original reason for structuring the code this way is explained in https://android-review.googlesource.com/#/c/100530/4/cmds/servicemanager/service_manager.c@172 The concern at the time was to avoid leaking a situation where a caller could probe for the existance of a service. This turns out to be unnecessary. The same return value is used for both a permission denied and a service not found. The only side effect is the generation of an SELinux audit log, which likely won't be accessible to the calling application. Change-Id: I9760e1821ed16102fa5f9bec07f8c34944565be9
Diffstat (limited to 'libs/gui/ConsumerBase.cpp')
0 files changed, 0 insertions, 0 deletions