专栏之前文章介绍过SeLiunx了，这里就不一一介绍了

device/common/sepolicy/vendor/service.te

type wsettings_service,	system_api_service, system_server_service, service_manager_type;

device/common/sepolicy/vendor/system_app.te

allow system_app wsettings_service:service_manager find;

device/common/sepolicy/vendor/system_server.te

#for wsettings 
allow system_server wsettings_service:service_manager {add };

device/common/sepolicy/vendor/untrusted_app.te

#for wsettings 
allow untrusted_app wsettings_service:service_manager find;