• Nick Kralevich's avatar
    service_manager: reorder permission checks for find · b27bbd18
    Nick Kralevich authored
    Reorder the find permission checks. This avoids generating misleading
    SELinux denials when a service doesn't exist, or when a service is
    prohibited to isolated apps.
    
    The original reason for structuring the code this way is explained
    in https://android-review.googlesource.com/#/c/100530/4/cmds/servicemanager/service_manager.c@172
    The concern at the time was to avoid leaking a situation where
    a caller could probe for the existance of a service. This turns out
    to be unnecessary. The same return value is used for both a
    permission denied and a service not found. The only side effect
    is the generation of an SELinux audit log, which likely won't be
    accessible to the calling application.
    
    Change-Id: I9760e1821ed16102fa5f9bec07f8c34944565be9
    b27bbd18
service_manager.c 9.58 KB