Android下新增JNI过程中启动新增系统服务（addService）遇安全错误问题

Android下新增JNI过程中addService遇安全错误问题

    今天新增一个JNI的时候遇到一个调用用addService的时候发生异常的问题：

首先是在SystemService.java添加一个自己定义的binder service，代码如下：

try {
Slog.i(TAG, "Xxx Service");
ServiceManager.addService("xxx", new XxxService());
  } catch (Throwable e) {
reportWtf("starting Xxx Service", e);
}

结果发现执行到这的时候发生异常: SystemServer: BOOT FAILURE starting Xxx Service。

查看系统log发现：

…………
01-03 02:26:15.040  3907  3907 I SystemServiceManager: Starting com.android.server.midi.MidiService$Lifecycle

01-03 02:26:15.054  3907  3907 I SystemServiceManager: Starting com.android.server.usb.UsbService$Lifecycle

01-03 02:26:15.171  3907  3907 I SystemServiceManager: Starting com.android.server.twilight.TwilightService

01-03 02:26:15.201  3907  3907 I SystemServiceManager: Starting com.android.server.job.JobSchedulerService

01-03 02:26:15.249  3907  3907 I SystemServiceManager: Starting com.android.server.backup.BackupManagerService$Lifecycle

01-03 02:26:15.327  3907  3907 I SystemServiceManager: Starting com.android.server.appwidget.AppWidgetService

01-03 02:26:15.422  3907  3907 I SystemServiceManager: Starting com.android.server.GestureLauncherService
01-03 02:26:15.433   261   261 E ServiceManager: add_service('xxx',54) uid=1000 - PERMISSION DENIED

01-03 02:26:15.436  3907  3907 E SystemServer:     at android.os.ServiceManagerProxy.addService(ServiceManagerNative.java:150)

01-03 02:26:15.436  3907  3907 E SystemServer:     at android.os.ServiceManager.addService(ServiceManager.java:72)

01-03 02:26:15.485  3907  3907 I SystemServiceManager: Starting com.android.server.dreams.DreamManagerService

01-03 02:26:15.504  3907  3907 I SystemServiceManager: Starting com.android.server.print.PrintManagerService

01-03 02:26:15.517  3907  3907 I SystemServiceManager: Starting com.android.server.restrictions.RestrictionsManagerService

01-03 02:26:15.523  3907  3907 I SystemServiceManager: Starting com.android.server.media.MediaSessionService

01-03 02:26:15.558  3907  3907 I SystemServiceManager: Starting com.android.server.trust.TrustManagerService

01-03 02:26:15.581  3907  3907 I SystemServiceManager: Starting com.android.server.fingerprint.FingerprintService

01-03 02:26:15.624  3907  3907 I SystemServiceManager: Starting com.android.server.pm.LauncherAppsService

01-03 02:26:15.632  3907  3907 I SystemServiceManager: Starting com.android.server.media.projection.MediaProjectionManagerService

01-03 02:26:15.687  3907  3907 I SystemServiceManager: Starting com.android.server.MmsServiceBroker

………………

解决方案：

1. 在/external/sepolicy/service.te中仿写添加：

type xxx_service, system_api_service, system_server_service, service_manager_type;

2. 在/external/sepolicy/service_contexts下仿写添加：

xxx                               u:object_r:xxx_service:s0

   

    添加完成编译，问题便可解决。