Update evs_app selinux policy
- Removes a redundant policy from servicemanager.te.
- Adds a new permission to get a list of available services.
Bug: 240151818
Test: m -j selinux_policy
Change-Id: Idc9d1a53d4f76d790a21c4d8fbabebf7727d6cad
diff --git a/cpp/evs/apps/sepolicy/private/evs_app.te b/cpp/evs/apps/sepolicy/private/evs_app.te
index 910bfa0..60f2a92 100644
--- a/cpp/evs/apps/sepolicy/private/evs_app.te
+++ b/cpp/evs/apps/sepolicy/private/evs_app.te
@@ -24,3 +24,6 @@
# Allow use of binder and find surfaceflinger
binder_use(evs_app);
allow evs_app surfaceflinger_service:service_manager find;
+
+# Allow get a list of available services
+allow evs_app servicemanager:service_manager list;
diff --git a/cpp/evs/apps/sepolicy/private/servicemanager.te b/cpp/evs/apps/sepolicy/private/servicemanager.te
deleted file mode 100644
index da102a8..0000000
--- a/cpp/evs/apps/sepolicy/private/servicemanager.te
+++ /dev/null
@@ -1,2 +0,0 @@
-# Allow evs_app to use Binder IPC
-binder_use(evs_app)
