tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/public/property.te

375 lines
15 KiB
Text
Raw Normal View History

Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
# Properties used only in /system
Move system property rules to private public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe (cherry picked from commit 42c7d8966cc5f76c84c001c5af787cbfade736c8)
2020-03-04 09:20:35 +01:00
#
# DO NOT ADD system_internal_prop here.
# Instead, add to private/property.te.
# TODO(b/150331497): move these to private/property.te
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_internal_prop(apexd_prop)
system_internal_prop(bootloader_boot_reason_prop)
system_internal_prop(device_config_activity_manager_native_boot_prop)
system_internal_prop(device_config_boot_count_prop)
system_internal_prop(device_config_input_native_boot_prop)
system_internal_prop(device_config_media_native_prop)
system_internal_prop(device_config_netd_native_prop)
system_internal_prop(device_config_reset_performed_prop)
system_internal_prop(firstboot_prop)
Make public for exported properties on old devices Properties which are already allowed to be written by vendor_init can't be internal or restricted prop. This sets the properties as public except for forbidden ones on vendor_init.te. Bug: 131162102 Test: system/sepolicy/tools/build_policies.sh Change-Id: Icc1e813e78a48856adee26fb20f01300713e1d30
2019-10-17 06:42:42 +02:00
compatible_property_only(`
# DO NOT ADD ANY PROPERTIES HERE
system_internal_prop(boottime_prop)
system_internal_prop(charger_prop)
system_internal_prop(cold_boot_done_prop)
system_internal_prop(ctl_adbd_prop)
system_internal_prop(ctl_apexd_prop)
system_internal_prop(ctl_bootanim_prop)
system_internal_prop(ctl_bugreport_prop)
system_internal_prop(ctl_console_prop)
system_internal_prop(ctl_dumpstate_prop)
system_internal_prop(ctl_fuse_prop)
system_internal_prop(ctl_gsid_prop)
system_internal_prop(ctl_interface_restart_prop)
system_internal_prop(ctl_interface_stop_prop)
system_internal_prop(ctl_mdnsd_prop)
system_internal_prop(ctl_restart_prop)
system_internal_prop(ctl_rildaemon_prop)
system_internal_prop(ctl_sigstop_prop)
system_internal_prop(dynamic_system_prop)
system_internal_prop(heapprofd_enabled_prop)
system_internal_prop(llkd_prop)
system_internal_prop(lpdumpd_prop)
system_internal_prop(mmc_prop)
system_internal_prop(mock_ota_prop)
system_internal_prop(net_dns_prop)
system_internal_prop(overlay_prop)
system_internal_prop(persistent_properties_ready_prop)
system_internal_prop(safemode_prop)
system_internal_prop(system_lmk_prop)
system_internal_prop(system_trace_prop)
system_internal_prop(test_boot_reason_prop)
system_internal_prop(time_prop)
system_internal_prop(traced_enabled_prop)
system_internal_prop(traced_lazy_prop)
')
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
# Properties which can't be written outside system
Move aac_drc props to aac_drc_prop Bug: 155844385 Test: sepolicy_tests Change-Id: I1755672b5cef876955f93020c519aaaabf814bbf
2020-05-06 11:30:20 +02:00
system_restricted_prop(aac_drc_prop)
Add adaptive haptics restricted system property Create adaptive haptics system property to store adaptive haptics enable state. Bug: 198239103 Test: Verified system property usage Change-Id: I5d4f0a5c8ec4a5b0ce18bc03a6d30879dd76d58b Signed-off-by: Chris Paulo <chrispaulo@google.com>
2022-11-12 22:36:02 +01:00
system_restricted_prop(adaptive_haptics_prop)
Set apex. property as "system_restricted" Since the property is supposed to be used by vendor-side .rc file as read-only (especially by vendor apex), it should be "system_restricted". Also allow vendor_init to read the property. Bug: 232172382 Test: boot cuttlefish (with vendor apex using the property) Change-Id: I502388e550e0a3c961a51af2e2cf11335a45b992
2022-09-02 09:26:27 +02:00
system_restricted_prop(apex_ready_prop)
[MTE] Add memtag sysprop sepolicy. These flags should be writeable to the shell for both root and non-root users. They should be readable everywhere, as they're read in libc during initialization (and there's nothing secret to hide). We just don't want to allow apps to set these properties. These properties are non-persistent, are for local developer debugging only. Bug: 135772972 Bug: 172365548 Test: `adb shell setprop memtag.123 0` in non-root shell succeeds. Change-Id: If9ad7123829b0be27c29050f10081d2aecdef670
2020-12-04 02:23:06 +01:00
system_restricted_prop(arm64_memtag_prop)
Fix treble boundary neverallow to use attributes These neverallow rules are to prevent properties from crossing treble boundary. As attributes like internal / restricted / public has been landed, the neverallow rules are changed to use attributes to avoid endless manual maintaining of the list. Bug: 148181222 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0ba930f6c78852e785858fb069faf4f984643e34
2020-01-28 06:43:57 +01:00
system_restricted_prop(binder_cache_bluetooth_server_prop)
system_restricted_prop(binder_cache_system_server_prop)
Use prefixes for binder cache SELinux properties. Adds a context for telephony related cache properties and changes the bluetooth and system_server properties to match off of prefix instead of exact string matches. Test: Flashed phone with PowerManager caches enabled and verified that the phone boots. Change-Id: I9110192a12bb6222e49a8fb6b266d6067ef2ea92
2020-01-28 22:08:28 +01:00
system_restricted_prop(binder_cache_telephony_server_prop)
Add boot_status_prop for boot completed props Assigning a new context boot_status_prop for following two properties: - sys.boot_completed - dev.bootcomplete Bug: 154885206 Test: boot cf_x86 and crosshatch, see no denials Change-Id: Ieadabf90a9a1b54b52a1283bd648c11c95d558dd Merged-In: Ieadabf90a9a1b54b52a1283bd648c11c95d558dd (cherry picked from commit 2973c9605555c119243ef85119576b2d01a12060)
2020-04-24 08:03:01 +02:00
system_restricted_prop(boot_status_prop)
Allow boot animation to update boot status. This CL was missed from the topic: https://android-review.googlesource.com/q/topic:bootanim-percent Test: update ART module, see animation go to 100% Bug: 184881321 Change-Id: I59706718af11751a7e1f4b5ab1ff2793f554fb19
2021-04-28 14:57:11 +02:00
system_restricted_prop(bootanim_system_prop)
Add bootloader_prop for ro.boot. properties ro.boot. properties assigned as "exported2_default_prop" are now "bootloader_prop", to remove bad context name "exported2_default_prop". Two things to clarify: 1) We have both the prefix entry and the exact entries. Although the exact entries may be redundant, we may want to keep them. Vendors are still allowed to have properties starting with "ro.boot." on vendor_property_contexts file. The exact entries can prevent vendors from modifying them to random contexts. 2) ro.boot. is special as it is originally for kernel command line "androidboot.". But some ro.boot. properties are being used as if they were normal. To avoid regression, ro.boot. properties having contexts other than "exported2_default_prop" are not changed here. They will be tracked later. Bug: 155844385 Test: m selinux_policy Change-Id: Ic0f4117ae68a828787304187457b5e1e105a52c7 Merged-In: Ic0f4117ae68a828787304187457b5e1e105a52c7
2020-07-23 10:54:35 +02:00
system_restricted_prop(bootloader_prop)
sepolicy: introduce boottime props in public Bug: 146053177 Bug: 146053658 Bug: 149844577 Change-Id: Iddfefedc4538044c6abcc2eea29b86e3f038aee0 Merged-In: Iddfefedc4538044c6abcc2eea29b86e3f038aee0 Signed-off-by: Jaegeuk Kim <jaegeuk@google.com> (cherry picked from commit 19df15400ee76df1938ae95d2f92217ce776a956)
2020-03-04 04:40:41 +01:00
system_restricted_prop(boottime_public_prop)
selinux policy for buffer queue config Test: boot and check for no policy violations Change-Id: I1ea2a79b9a45b503dcb061c196c5af1d0ddab653
2020-01-20 06:11:07 +01:00
system_restricted_prop(bq_config_prop)
Add ro.bootimage.* property contexts In addition, allow shell to read this property. Test: getprop -Z Test: cts-tradefed run cts -m CtsGestureTestCases and check /sdcard/device-info-files/PropertyDeviceInfo.deviceinfo.json Bug: 169169031 Change-Id: Ib71b01bac326354696e159129f9dea4c2e918c51
2020-10-07 02:52:17 +02:00
system_restricted_prop(build_bootimage_prop)
Relabel ro.build. properties - exported_fingerprint_prop is deleted - other ro.build. properties become build_prop Bug: 155844385 Test: sepolicy_tests Change-Id: Ic1194e8e7c23394e5a7c6176f9f9598109bb5fb7 Merged-In: Ic1194e8e7c23394e5a7c6176f9f9598109bb5fb7 (cherry picked from commit 1d63d5d0756d0d47ef6ec816b3c35b3b96bd50d4)
2020-05-06 13:07:33 +02:00
system_restricted_prop(build_prop)
Allow CompOS to read VM config properties We want to allow both the VM and ART to contribute to the VM config (e.g. memory size), so define labels for 2 sets of properties and grant the necessary access. Bug: 274102209 Test: builds Change-Id: Iaca1e0704301c9155f44e1859fc5a36198917568
2023-03-22 10:48:30 +01:00
system_restricted_prop(composd_vm_art_prop)
SEPolicy updates for camera HAL Updates SEPolicy files to give camera HAL permission to access Android Core Experiment flags. Example denials: 11-30 13:08:33.172 1027 1027 W binder:1027_3: type=1400 audit(0.0:7): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 11-30 13:08:33.172 1027 1027 W binder:1027_3: type=1400 audit(0.0:8): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 11-30 13:08:33.244 1027 1027 W 3AThreadPool: type=1400 audit(0.0:9): avc: denied { read } for name="u:object_r:default_prop:s0" dev="tmpfs" ino=152 scontext=u:r:hal_camera_default:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0 Bug: 259433722 Test: m Change-Id: I11165b56d7b7e38130698cf86d9739f878580a14
2022-12-09 19:23:37 +01:00
system_restricted_prop(device_config_camera_native_prop)
Add SELinux policy for edgetpu_native device_config prop The new android property namespace will store the configurations which are set on the server side and read by the EdgeTpu HAL. Notes: * This CL is similar to nnapi_native CL: https://android-review.git.corp.google.com/c/platform/system/sepolicy/+/1844919 * The read permission of EdgeTpu HAL will be added in another internal CL. Test: mm Bug: 243553703 Bug: 246401730 Change-Id: I5705f679148b313d919f334c51e31f7645aca82a
2023-02-13 22:55:57 +01:00
system_restricted_prop(device_config_edgetpu_native_prop)
Update sepolicy for adding nnapi_native namespace. Test: mm Bug: 201399117 Change-Id: I40a2431b6f5a54deae27fe68f503aff9b99e2793
2021-10-05 16:23:18 +02:00
system_restricted_prop(device_config_nnapi_native_prop)
Enable ART properties modularization ART is becoming a module and we need to be able to add new properties without modifying the non updatable part of the platform: - convert ART properties to use prefix in the namespace of [ro].dalvik.vm. - enable appdomain and coredomain to read device_config properties that configure ART Test: boot Bug: 181748174 Change-Id: Id23ff78474dba947301e1b6243a112b0f5b4a832
2021-05-19 00:33:08 +02:00
system_restricted_prop(device_config_runtime_native_boot_prop)
system_restricted_prop(device_config_runtime_native_prop)
Make surface_flinger_native_boot_prop a system_restricted_prop for ADPF Test: manual Bug: b/195990840 Change-Id: Icb758c48a1faa8901a1d2c2c442451c42fc3b5b1
2021-12-22 22:34:33 +01:00
system_restricted_prop(device_config_surface_flinger_native_boot_prop)
Allow vendor services to access vendor_system_native_prop Bug: 226456604 Test: Build Change-Id: Icc11b9bf06fd0fb8069388ca5a32e8aedf1743a8
2022-05-02 11:55:47 +02:00
system_restricted_prop(device_config_vendor_system_native_prop)
sepolicy: allow vendor system native boot experiments property Grant system_server and flags_health_check permission to set the properties that correspond to vendor system native boot experiments. Bug: 241730607 Test: Build Merged-In: Idc2334534c2d42a625b451cfce488d7d7a651036 Change-Id: I3e98f1b05058245cad345061d801ecd8de623109
2022-08-08 11:26:22 +02:00
system_restricted_prop(device_config_vendor_system_native_boot_prop)
Relabel ro.build. properties - exported_fingerprint_prop is deleted - other ro.build. properties become build_prop Bug: 155844385 Test: sepolicy_tests Change-Id: Ic1194e8e7c23394e5a7c6176f9f9598109bb5fb7 Merged-In: Ic1194e8e7c23394e5a7c6176f9f9598109bb5fb7 (cherry picked from commit 1d63d5d0756d0d47ef6ec816b3c35b3b96bd50d4)
2020-05-06 13:07:33 +02:00
system_restricted_prop(fingerprint_prop)
[GWP-ASan] Add sysprop, allow shell and system apps to set it. Bug: 219651032 Test: atest bionic-unit-tests Change-Id: Ic4804ce0e4f3b6ba8eb8d82aca11b400b45c03dc
2022-03-22 23:59:57 +01:00
system_restricted_prop(gwp_asan_prop)
Remove exported2_default_prop This cleans up remaining exported2_default_prop. Three properties are changed. - ro.arch It becomes build_prop. - hal.instrumentation.enable It becomes hal_instrumentation_prop. - ro.property_service.version It becomes property_service_version_prop. Bug: 155844385 Test: selinux denial test on Pixel devices Change-Id: I7ee0bd8c522cc09ee82ef89e6a13bbbf65291291
2020-07-24 17:34:56 +02:00
system_restricted_prop(hal_instrumentation_prop)
Disallow untrusted apps to read ro.debuggable and ro.secure ro.secure and ro.debuggable system properties are not intended to be visible via Android SDK. This change blocks untrusted apps from reading these properties. Test: android.security.SELinuxTargetSdkTest Bug: 193912100 Change-Id: I40ac5d43da5778b5fa863b559c28e8d72961f831
2022-07-14 13:52:21 +02:00
system_restricted_prop(userdebug_or_eng_prop)
Add contexts for init.svc.* props To remove bad context names "exported*_prop". Other init.svc.* properties explicitly become system internal prop. Bug: 155844385 Test: boot and see no denials Change-Id: I7a3b4103a4cea77035a6e831e3b6a49a45f15a35
2020-05-14 12:43:08 +02:00
system_restricted_prop(init_service_status_prop)
Move libc.debug. props to libc_debug_prop Bug: 155844385 Test: sepolicy_tests Change-Id: I15421ada0c58c3c8d07d824e83cf44f6c4590ca8
2020-05-06 15:20:35 +02:00
system_restricted_prop(libc_debug_prop)
Rename sdkext sepolicy to sdkextensions The module is getting renamed, so rename all the policy relating to it at the same time. Bug: 137191822 Test: presubmit Change-Id: Ia9d966ca9884ce068bd96cf5734e4a459158c85b Merged-In: Ia9d966ca9884ce068bd96cf5734e4a459158c85b (cherry picked from commit 6505573c36dcc6153af37895e968400f722119ea)
2020-01-06 18:29:13 +01:00
system_restricted_prop(module_sdkextensions_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_restricted_prop(nnapi_ext_deny_product_prop)
Add a persist.wm.debug property type and associated permissions This is intended for wm properties related to wmshell/sysui. Using this context allows sysui to manipulate these properties in debug builds. Bug: 219067621 Test: manual Change-Id: I5808bf92dbba37e9e6da5559f8e0a5fdac016bf3
2022-03-02 23:13:58 +01:00
system_restricted_prop(persist_wm_debug_prop)
Define power.battery_input.suspended property Bug: 167636754 Test: on a device that has triggers configured for this property Test: adb shell setprop power.battery_input.suspended true to disable charging Test: adb shell setprop power.battery_input.suspended false to reenable charging Merged-In: I79209530d5355a59a1cb7a61c629339cd62f8eb1 Merged-In: I4692d84d5c137d11c6f648d15083614e707fdd07 Change-Id: I4692d84d5c137d11c6f648d15083614e707fdd07
2020-09-11 03:51:58 +02:00
system_restricted_prop(power_debug_prop)
Remove exported2_default_prop This cleans up remaining exported2_default_prop. Three properties are changed. - ro.arch It becomes build_prop. - hal.instrumentation.enable It becomes hal_instrumentation_prop. - ro.property_service.version It becomes property_service_version_prop. Bug: 155844385 Test: selinux denial test on Pixel devices Change-Id: I7ee0bd8c522cc09ee82ef89e6a13bbbf65291291
2020-07-24 17:34:56 +02:00
system_restricted_prop(property_service_version_prop)
Move props out of exported3_system_prop This is to remove bad context name "exported3_system_prop". - persist.sys.device_provisioned -> provisioned_prop - sys.retaildemo.enabled -> retaildemo_prop Bug: 154885206 Test: boot device and see no denials Change-Id: Ia19a19d93d0689deb56d66fe0b039ace44e4836f
2020-05-13 18:38:40 +02:00
system_restricted_prop(provisioned_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_restricted_prop(restorecon_prop)
Move props out of exported3_system_prop This is to remove bad context name "exported3_system_prop". - persist.sys.device_provisioned -> provisioned_prop - sys.retaildemo.enabled -> retaildemo_prop Bug: 154885206 Test: boot device and see no denials Change-Id: Ia19a19d93d0689deb56d66fe0b039ace44e4836f
2020-05-13 18:38:40 +02:00
system_restricted_prop(retaildemo_prop)
servicemanager started property If something starts before servicemanager does, intelligently wait for servicemanager to start rather than sleeping for 1s. Bug: 239382640 Test: boot Change-Id: If0380c3a1fce937b0939cd6137fcb25f3e47d14c
2022-07-20 22:54:25 +02:00
system_restricted_prop(servicemanager_prop)
Add persist.device_config.storage_native_boot.smart_idle_maint_enabled property policies Add policies to set persist.device_config.storage_native_boot.smart_idle_maint_enabled property. Bug: 202283480 Bug: 181079477 Bug: 215443809 Change-Id: I998e6dca950a8ceebb5fbc39568e3e8d6b86e8ce
2022-03-18 10:45:46 +01:00
system_restricted_prop(smart_idle_maint_enabled_prop)
Define sepolicy for redirect-socket-calls feature Define two property_context. 1. vendor_socket_hook_prop - for ro.vendor.redirect_socket_calls. The property set once in vendor_init context. It's evaluated at process start time and is cannot change at runtime on a given device. The set permission is restricted to vendor_init. The read permission is unrestricted. 2. socket_hook_prop - for net.redirect_socket_calls.hooked. The property can be changed by System Server at runtime. It's evaluated when shimmed socket functions is called. The set permission is restricted to System Server. The read permission is unrestricted. Bug: Bug: 141611769 Test: System Server can set net.redirect_socket_calls.hooked libnetd_client can read both properties libnetd_client can't set both properties Change-Id: Ic42269539923e6930cc0ee3df8ba032797212395
2020-02-10 10:43:15 +01:00
system_restricted_prop(socket_hook_prop)
Add contexts for sqlite debug properties These are read by some apps, but don't have any corresponding property contexts. This adds a new context as we're going to remove default_prop access. Bug: 173360450 Test: no sepolicy denials Change-Id: I9be28d8e641eb6380d080150bee785a3cc304ef4
2020-11-17 05:54:52 +01:00
system_restricted_prop(sqlite_log_prop)
sepolicy: allow surfaceflinger to set surfaceflinger_display_prop W//system/bin/init: type=1107 audit(0.0:51): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=graphics.display.kernel_idle_timer.enabled pid=643 uid=1000 gid=1003 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:surfaceflinger_display_prop:s0 tclass=property_service permissive=0 Bug: 157513573 Test: surfaceflinger can set graphics.display.kernel_idle_timer.enabled Test: vendor_init can get graphics.display.kernel_idle_timer.enabled Change-Id: I78023a7857c8aa81a8863010b875bcb885bae614
2020-06-17 16:13:21 +02:00
system_restricted_prop(surfaceflinger_display_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_restricted_prop(system_boot_reason_prop)
Revert^2 "SELinux policy for system server JVMTI" This reverts commit baa06ee2cd8b2f6c8bd0c2d873dc2888d6296353. Reason for revert: Added missing property name in vendor_init.te. Bug: none Test: none (other than neverallow checking) Change-Id: I9e93bf4ea6ca3a4634f8f4cbce2f13c5f410883b
2019-11-25 23:03:59 +01:00
system_restricted_prop(system_jvmti_agent_prop)
Sysprop for the count of active OOME tracing sessions In order for ART code to call perfetto DataSource::Trace() we need to wait for all data source instances to have completed their setup. To do so, we need to know how many of them exist. This introduces a new sysprop traced.oome_heap_session.count, writeable by perfetto traced and readable by apps and system_server that can be used to communicate this. See go/art-oom-heap-dump for more details Test: manual, atest HeapprofdJavaCtsTest Bug: 269246893 Change-Id: Ib8220879a40854f98bc2f550ff2e7ebf3e077756
2023-02-10 18:52:19 +01:00
system_restricted_prop(traced_oome_heap_session_count_prop)
Add gki.prevent_downgrade_* Add ro.build.ab_update.gki.prevent_downgrade_{version,spl} for update_engine to determine whether downgrade in kernel version or SPL is considered an error or not. Bug: 162623577 Test: update_engine_unittest Test: apply OTA Change-Id: If602924d50a2d5cfb3c256b82491c413a9d39f9d
2020-09-22 05:04:00 +02:00
system_restricted_prop(ab_update_gki_prop)
Take new types out of compatible_property_only compatible_property_only is meaningless to new types introduced after Android P because the macro is for types which should have different accessibilities depending on the device's launching API level. Bug: N/A Test: system/sepolicy/tools/build_policies.sh Change-Id: If6b1cf5e4203c74ee65f170bd18c3a354dca2fd4
2020-05-21 13:12:55 +02:00
system_restricted_prop(usb_prop)
Add selinux rules for userspace reboot related properties By default sys.init.userspace_reboot.* properties are internal to /system partition. Only exception is sys.init.userspace_reboot.in_progress which signals to all native services (including vendor ones) that userspace reboot is happening, hence it should be a system_public_prop. Only init should be allowed to set userspace reboot related properties. Bug: 135984674 Test: builds Test: adb reboot userspace Change-Id: Ibb04965be2d5bf6e81b34569aaaa1014ff61e0d3
2019-11-14 13:59:15 +01:00
system_restricted_prop(userspace_reboot_exported_prop)
Rename exported and exported2 vold prop This is a subtask to clean up bad context names "exported*_prop". Bug: 152469526 Test: m Change-Id: Ie2d4046732e9d6562294fa664dcd7f019aa7c229
2020-04-06 13:49:17 +02:00
system_restricted_prop(vold_status_prop)
Add property contexts for vts props vts_config_prop and vts_status_prop are added to remove exported*_prop. ro.vts.coverage becomes vts_config_prop, and vts.native_server.on becomes vts_status_prop. Bug: 155844385 Test: Run some vts and then getprop, e.g. atest \ VtsHalAudioEffectV4_0TargetTest && adb shell getprop Test: ro.vts.coverage is read without denials Change-Id: Ic3532ef0ae7083db8d619d80e2b73249f87981ce
2020-07-13 19:10:37 +02:00
system_restricted_prop(vts_status_prop)
Add a new system property persist.graphics.egl This new system property will be read and written by a new developer option switch, through gpuservice. Based on the value stored in persis.graphics.egl, we will load different GLES driver. e.g. persist.graphics.egl == $ro.hardware.egl: load native GLES driver persist.graphics.egl == angle: load angle as GLES driver Bug: b/270994705 Test: m; flash and check Pixel 7 boots fine Change-Id: Idec4b947d0c69c52cd798df4f834053bd306cf5f
2023-04-09 02:15:43 +02:00
system_restricted_prop(graphics_config_writable_prop)
Make public for exported properties on old devices Properties which are already allowed to be written by vendor_init can't be internal or restricted prop. This sets the properties as public except for forbidden ones on vendor_init.te. Bug: 131162102 Test: system/sepolicy/tools/build_policies.sh Change-Id: Icc1e813e78a48856adee26fb20f01300713e1d30
2019-10-17 06:42:42 +02:00
compatible_property_only(`
# DO NOT ADD ANY PROPERTIES HERE
system_restricted_prop(config_prop)
system_restricted_prop(cppreopt_prop)
system_restricted_prop(dalvik_prop)
system_restricted_prop(debuggerd_prop)
system_restricted_prop(device_logging_prop)
system_restricted_prop(dhcp_prop)
system_restricted_prop(dumpstate_prop)
system_restricted_prop(exported3_system_prop)
system_restricted_prop(exported_dumpstate_prop)
system_restricted_prop(exported_secure_prop)
system_restricted_prop(heapprofd_prop)
system_restricted_prop(net_radio_prop)
system_restricted_prop(pan_result_prop)
system_restricted_prop(persist_debug_prop)
system_restricted_prop(shell_prop)
system_restricted_prop(test_harness_prop)
system_restricted_prop(theme_prop)
system_restricted_prop(use_memfd_prop)
system_restricted_prop(vold_prop)
')
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
# Properties which can be written only by vendor_init
Add apexd_config_prop type This type is used for properties that provides per-device configuration for apexd behaviour (so far - timeouts for creating/deleting dm device). Test: builds Bug: 182296338 Change-Id: Ib815f081d3ab94aa8c941ac68b57ebe661acedb9
2021-03-13 02:35:51 +01:00
system_vendor_config_prop(apexd_config_prop)
Revert "Revert "Adds a new prop context for choosing between mul..." Revert "Revert "Adds multi_install_skip_symbol_files field (defa..." Revert submission 1893459-revert-1869814-vapex-multi-config-VKODFOVCWY Reason for revert: Fix-forward in https://r.android.com/1894088 Reverted Changes: I087bfe0dc:Revert "Adds a new prop context for choosing betwe... I27a498506:Revert "Load persist props before starting apexd."... Ib5344edc0:Revert "Allow users to choose between multi-instal... If09bf590e:Revert "Adds multi_install_skip_symbol_files field... I905dac14c:Revert "Demonstrate multi-installed APEXes." Change-Id: I03fb124d4e7044f236539a132816fd96cb814775
2021-11-16 21:28:29 +01:00
system_vendor_config_prop(apexd_select_prop)
Add aaudio_config_prop and move aaudio properties To remove ambiguous context name exported_default_prop Bug: 71814576 Test: boot and see no denials Change-Id: I40eb92653fabc509419e07bb4bfa7301a8762352
2020-06-23 15:01:45 +02:00
system_vendor_config_prop(aaudio_config_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
system_vendor_config_prop(apk_verity_prop)
Move audio config props to audio_config_prop Bug: 155844385 Test: sepolicy_tests Change-Id: Ic199925b5e3e1c80f1e692c8c5fc2cbb73eda0f5
2020-05-06 12:17:42 +02:00
system_vendor_config_prop(audio_config_prop)
Add bootanim property context, ro.bootanim.quiescent.enabled property Add property & property context to configure whether the bootanimation should be played in a quiescent boot. Bug: 185118020 Test: Set property through PRODUCT_PRODUCT_PROPERTIES Test: Read property from bootanimation process Change-Id: Ib9e88444da7f5e8000d7367199f5230f1e4d26d9
2021-04-15 16:55:37 +02:00
system_vendor_config_prop(bootanim_config_prop)
Added new context declaration for Bluetooth configs As we need to create new sysprops for Bluetooth mainline configs, we need to have a property context available to vendors and be able to access configs from other packages. Tag: #feature Bug: 211570675 Test: Added overlays and logs Change-Id: If9c61f251578b61c070619069519e0aa563a9573
2022-01-12 14:05:33 +01:00
system_vendor_config_prop(bluetooth_config_prop)
Add build properties for attestation feature The properties for attestation are congifured in build.prop files and used by frameworks Build.java. Allow vendor_init to set these properties and allow Zygote to access them. Bug: 211547922 Test: SELinuxUncheckedDenialBootTest Change-Id: I5666524a9708c6fefe113ad4109b8a344405ad57
2023-02-01 10:50:57 +01:00
system_vendor_config_prop(build_attestation_prop)
Add context for ro.product.property_source_order Any partitions should be able to write this property with build.prop. This adds a new context for ro.product.property_source_order so it can be set from any build.prop, e.g. vendor/build.prop, product/build.prop, etc. Bug: 172459064 Test: PRODUCT_VENDOR_PROPERTIES can set this property Change-Id: Ibf85a4ad02d8454f621428b271e8e298067aa126
2020-11-12 14:21:51 +01:00
system_vendor_config_prop(build_config_prop)
Refine build.prop related properties 1) build_odm_prop and build_vendor_prop are added These contexts will contain world-readable properties from /odm/build.prop and /vendor/build.prop, respectively. 2) move more properties to build_prop Following properties are set by /system/build.prop and now assigned as build_prop: - ro.adb.secure - ro.build.type - ro.product.cpu.abi - ro.product.cpu.abilist - ro.product.cpu.abilist32 - ro.product.cpu.abilist64 - ro.secure Following properties are set by init/property_service.cpp and now assigned as build_prop: - ro.product.brand - ro.product.device - ro.product.manufacturer - ro.product.model - ro.product.name Bug: 71814576 Bug: 155844385 Test: boot device and see no denials Change-Id: Idd4f81de4d2d0fc4bdec2d7ecb08bb8e078dab58
2020-05-19 15:02:58 +02:00
system_vendor_config_prop(build_odm_prop)
system_vendor_config_prop(build_vendor_prop)
Move more properties out of exported3_default_prop This is to remove exported3_default_prop. Contexts of these properties are changed. - ro.boot.wificountrycode This becomes wifi_config_prop - ro.opengles.version This becomes graphics_config_prop. Also it's read by various domains, so graphics_config_prop is now readable from coredomain. - persist.config.calibration_fac This becomes camera_calibration_prop. It's only readable by appdomain. Bug: 155844385 Test: no denials on Pixel devices Test: connect wifi Change-Id: If2b6c10fa124e29d1612a8f94ae18b223849e2a9
2020-07-20 13:26:07 +02:00
system_vendor_config_prop(camera_calibration_prop)
Move camera config props to camera_config_prop Bug: 155844385 Test: sepolicy_tests Change-Id: Iebe81d9af48e68e6499272bd5815e959f5945567
2020-05-06 17:36:05 +02:00
system_vendor_config_prop(camera_config_prop)
Add camera2 extension property policies These properties allow to vendors to provide their own camera2 extensions service. The properties must be accesible to any android app that wishes to use camera2 extensions. Change-Id: I94c7ac336b3103355124830320787472f0d2a8b6
2021-06-19 01:59:41 +02:00
system_vendor_config_prop(camera2_extensions_prop)
Define vendor side property "ro.camerax.extensions.enabled" Add "ro.camerax.extensions.enabled" vendor-specific property. Allow public apps to read this property. Bug: 171572972 Test: Camera CTS Change-Id: Id5fadedff6baaaebe5306100c2a054e537aa61ed
2020-11-18 23:08:41 +01:00
system_vendor_config_prop(camerax_extensions_prop)
Add charger related property contexts ro.enable_boot_charger_mode and sys.boot_from_charger_mode are moved to new property contexts for charger props to remove exported*_prop. Bug: 155844385 Test: boot device with ro.enable_boot_charger_mode Change-Id: I17d195d3c9c002a42125d46a5efcdb890f1c2a5c
2020-07-10 07:15:15 +02:00
system_vendor_config_prop(charger_config_prop)
media: add codec2_config_prop This covers properties required by codec2 hal clients/service Bug: 181380463 Change-Id: I88f87d8693fa49beda0a26c6d0492a12177f108b
2021-03-19 17:55:36 +01:00
system_vendor_config_prop(codec2_config_prop)
Allow CompOS to read VM config properties We want to allow both the VM and ART to contribute to the VM config (e.g. memory size), so define labels for 2 sets of properties and grant the necessary access. Bug: 274102209 Test: builds Change-Id: Iaca1e0704301c9155f44e1859fc5a36198917568
2023-03-22 10:48:30 +01:00
system_vendor_config_prop(composd_vm_vendor_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
system_vendor_config_prop(cpu_variant_prop)
Rename exported_dalvik_prop to dalvik_config_prop This is to clean up bad name "exported_dalvik_prop" Bug: 154465224 Test: sepolicy_tests Test: treble_sepolicy_tests 26.0 ~ 29.0 Change-Id: Ie5e738b5985c1db1bca7a857971d8490a7980b5b
2020-04-20 12:36:33 +02:00
system_vendor_config_prop(dalvik_config_prop)
Add a property to enable runtime debugfs restrictions in non-user builds This patch adds ro.product.enforce_debugfs_restrictions to property_contexts. When the property is set to true in non-user builds, init mounts debugfs in early-init to enable boot-time debugfs initializations and unmounts it on boot complete. Similarly dumpstate will mount debugfs to collect information from debugfs during bugreport collection via the dumpstate HAL and unmount debugfs once done. Doing so will allow non-user builds to keep debugfs disabled during runtime. Test: make with/without PRODUCT_SET_DEBUGFS_RESTRICTIONS, adb shell am bugreport Bug: 184381659 Change-Id: Ib720523c7f94a4f9ce944d46977a3c01ed829414
2021-04-01 07:07:02 +02:00
system_vendor_config_prop(debugfs_restriction_prop)
Relabel drm related props from exported*_prop To clean up bad context name exported[23]_default_prop Bug: 155844385 Test: m selinux_policy Change-Id: I9f9ddb0d44c4cea9bd1724df730bb7be9a6fb2d2
2020-05-25 08:36:44 +02:00
system_vendor_config_prop(drm_service_config_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
system_vendor_config_prop(exported_camera_prop)
system_vendor_config_prop(exported_config_prop)
system_vendor_config_prop(exported_default_prop)
Rename contexts of ffs props Bug: 71814576 Bug: 154885206 Test: m sepolicy_test Change-Id: Idacc3635851b14b833bccca177d784f4bb92c763
2020-04-27 16:49:15 +02:00
system_vendor_config_prop(ffs_config_prop)
Add framework_watchdog_config_prop The framework_watchdog_config_prop properties control framework watchdog configurations to handle watchdog timeout loop. The properties are written only by vendor_init. More details and background: go/break-sys-watchdog-loop Bug: 141948707 Change-Id: I6c0da5fdafba8165e79d0f04e0a82874f605a06d
2020-05-25 10:33:17 +02:00
system_vendor_config_prop(framework_watchdog_config_prop)
Update sepolicy for GPU profiling properties. A device must indicate whether GPU profiling is supported or not through setting these two properties properly. CTS needs to read these two properties in order to run corresponding compliance tests. Hence need to update sepolicy for these two properties. Bug: b/157832445 Test: Test on Pixel 4 Change-Id: I6f400ecbbd5e78b645bb620fa24747e9367c2ff3 Merged-In: I6f400ecbbd5e78b645bb620fa24747e9367c2ff3
2020-06-03 21:20:41 +02:00
system_vendor_config_prop(graphics_config_prop)
Add hdmi_config_prop for hdmi properties To remove bad context names. Bug: 154885206 Bug: 155844385 Test: m selinux_policy Change-Id: I5712bf836e07b3b26a51c3433234b986843076ea
2020-05-12 13:53:06 +02:00
system_vendor_config_prop(hdmi_config_prop)
Add support for a hw_timeout_multiplier system property. In order to test the platform in emulators that are orders of magnitude slower than real hardware we need to be able to avoid hitting timeouts that prevent it from coming up properly. For this purpose introduce a system property, ro.hw_timeout_multiplier, which may be set to an integer value that acts as a multiplier for various timeouts on the system. Bug: 178231152 Change-Id: I6d7710beed0c4c5b1720e74e7abe3a586778c678 Merged-In: I6d7710beed0c4c5b1720e74e7abe3a586778c678
2021-03-11 21:51:25 +01:00
system_vendor_config_prop(hw_timeout_multiplier_prop)
Adjust policy for hypervisor system properties 1. Allow them to be configured by vendor_init. 2. Introduce a new system property hypervisor.memory_reclaim.supported, which is configured by vendor_init and accessed only by virtualizationservice, and is not as widely accessible as the existing hypervisor sysprops. Bug: 235579465 Test: atest MicrodroidTests Change-Id: I952432568a6ab351b5cc155ff5eb0cb0dcddf433
2022-11-23 15:06:36 +01:00
system_vendor_config_prop(hypervisor_prop)
system_vendor_config_prop(hypervisor_restricted_prop)
Define vendor-specific property ro.incremental.enable [cherry-picking] Make ro.incremental.enable a vendor-specific property. Allow system_server and vold to read this property. Test: manual BUG: 155212902 Change-Id: I8ff8837af635fa8e7b5bb02e5f6de5ac15b5023b Merged-In: I8ff8837af635fa8e7b5bb02e5f6de5ac15b5023b
2020-04-28 22:24:54 +02:00
system_vendor_config_prop(incremental_prop)
Add keyguard_config_prop for keyguard property keyguard.no_require_sim becomes keyguard_config_prop to remove exported*_default_prop Bug: 155844385 Test: boot and see no denials Change-Id: Icffa88b650a1d35d8c1cd29f89daf0644a79ddd3
2020-07-07 05:46:24 +02:00
system_vendor_config_prop(keyguard_config_prop)
Add ro.keystore.boot_level_key.strategy Bug: 241241178 Test: set property on Cuttlefish, check logs for strategy used. Change-Id: Ifaaec811316c43fdae232f9a08c5d862011ccc71
2022-08-22 18:00:25 +02:00
system_vendor_config_prop(keystore_config_prop)
Move ro.lmk. properties to lmkd_config_prop Bug: 155844385 Test: sepolicy_tests Change-Id: I6a4412b3e7d3c46eae699bd8e7d2941f56b31773
2020-05-06 10:11:46 +02:00
system_vendor_config_prop(lmkd_config_prop)
Move media.* properties to media_config_prop Bug: 154885206 Bug: 155844385 Test: m selinux_policy Change-Id: Idfbafd29c51f7ce4512ea0d88fc7534e28eb1738
2020-05-11 10:33:27 +02:00
system_vendor_config_prop(media_config_prop)
Allow XML file paths to be customized with sysprop Three properties are declared as vendor-init-settable: ro.media.xml_variant.codecs ro.media.xml_variant.codecs_performance ro.media.xml_variant.profiles media_codecs.xml can now be named media_codecs${ro.media.xml_variant.codecs}.xml media_codecs_performance.xml can now be named media_codecs_performance${ro.media.xml_variant.codecs_performance}.xml media_profiles_V1_0 can now be named media_profiles${ro.media.xml_variant.profiles}.xml Test: Rename "media_codecs.xml" to "media_codecs_test.xml", set ro.media.xml_variant.codecs to "_test", then call "stagefright -i". Test: Rename "media_codecs_performance.xml" to "media_codecs_performance_test.xml", set ro.media.xml_variant.codecs_performance to "_test", then run android.media.cts.VideoDecoderPerfTest. Test: Rename "media_profiles_V1_0.xml" to "media_profiles_test.xml", set ro.media.xml_variant.profiles to "_test", then run vts_mediaProfiles_validate_test. Bug: 142102953 Change-Id: I407a0a327fcc8e799bb4079b11048a497565be48
2020-03-07 13:15:38 +01:00
system_vendor_config_prop(media_variant_prop)
Relabel drm related props from exported*_prop To clean up bad context name exported[23]_default_prop Bug: 155844385 Test: m selinux_policy Change-Id: I9f9ddb0d44c4cea9bd1724df730bb7be9a6fb2d2
2020-05-25 08:36:44 +02:00
system_vendor_config_prop(mediadrm_config_prop)
Sepolicy for mm_events Allow mm_events to periodically arm the mm_events perfetto trace config if mm_events is enabled. Bug: 183037386 Test: boot; setprop persist.mm_events.enabled true; No avc denials Change-Id: Ia9760001e7fb591f18e3e816a63281167a658c74
2021-03-16 19:30:36 +01:00
system_vendor_config_prop(mm_events_config_prop)
Relabel various exported3_default_prop This removes bad context names "exported*_prop". Property contexts of following properties are changed. All properties are settable only by vendor-init. - ro.config.per_app_memcg This becomes lmkd_config_prop. - ro.zygote This becomes dalvik_config_prop. - ro.oem_unlock_supported This becomes oem_unlock_prop. It's readable by system_app which includes Settings apps. - ro.storage_manager.enabled This becomes storagemanagr_config_prop. It's readable by coredomain. Various domains in coredomain seem to read it. - sendbug.preferred.domain This bcomes sendbug_config_prop. It's readable by appdomain. There are still 3 more exported3_default_prop, which are going to be tracked individually. Bug: 155844385 Test: selinux denial check on Pixel devices Change-Id: I340c903ca7bda98a92d0f157c65f6833ed00df05
2020-07-16 15:25:47 +02:00
system_vendor_config_prop(oem_unlock_prop)
Add new context packagemanager_config_prop To remove bad context names exported[23]_default_prop Bug: 155844385 Test: m selinux_policy Change-Id: Ic4bbc8e45d810368a96f6985c2234798e73be82d Merged-In: Ic4bbc8e45d810368a96f6985c2234798e73be82d (cherry picked from commit 072b01438e02e9d3cfba04c768e7a440549cc8b1)
2020-06-16 13:00:41 +02:00
system_vendor_config_prop(packagemanager_config_prop)
Relabel minui properties as recovery_config_prop To clean up bad context name exported[23]_default_prop Bug: 155844385 Test: m selinux_policy Test: enter recovery mode Change-Id: I312b6fa911a90dfc069a973c7916c67d92b7baa5
2020-06-16 12:18:24 +02:00
system_vendor_config_prop(recovery_config_prop)
Allow vendor_init to set properties for recovery/fastbootd USB IDs Bug: 211547922 Test: SELinuxUncheckedDenialBootTest Test: Enter recovery/fastbootd mode $ lsusb -d 18d1: Change-Id: Ibee1210c1a70a3165e70f9b3b57e11949e412c97
2023-01-13 15:28:23 +01:00
system_vendor_config_prop(recovery_usb_config_prop)
Relabel various exported3_default_prop This removes bad context names "exported*_prop". Property contexts of following properties are changed. All properties are settable only by vendor-init. - ro.config.per_app_memcg This becomes lmkd_config_prop. - ro.zygote This becomes dalvik_config_prop. - ro.oem_unlock_supported This becomes oem_unlock_prop. It's readable by system_app which includes Settings apps. - ro.storage_manager.enabled This becomes storagemanagr_config_prop. It's readable by coredomain. Various domains in coredomain seem to read it. - sendbug.preferred.domain This bcomes sendbug_config_prop. It's readable by appdomain. There are still 3 more exported3_default_prop, which are going to be tracked individually. Bug: 155844385 Test: selinux denial check on Pixel devices Change-Id: I340c903ca7bda98a92d0f157c65f6833ed00df05
2020-07-16 15:25:47 +02:00
system_vendor_config_prop(sendbug_config_prop)
Define SOC sysprop policy BUG: 158284209 Test: atest android.os.cts.BuildTest Change-Id: I7df7e575072c37ca379b97f60cc6c0850a02bcd1
2021-01-26 11:25:38 +01:00
system_vendor_config_prop(soc_prop)
Add external_storage properties. Since these need to be set from a vendor context. Bug: 152170470 Bug: 153525566 Test: N/A Change-Id: I2e90ad08fa0a5bd2b4759d92f95d35cec2b316df
2020-04-10 14:11:49 +02:00
system_vendor_config_prop(storage_config_prop)
Relabel various exported3_default_prop This removes bad context names "exported*_prop". Property contexts of following properties are changed. All properties are settable only by vendor-init. - ro.config.per_app_memcg This becomes lmkd_config_prop. - ro.zygote This becomes dalvik_config_prop. - ro.oem_unlock_supported This becomes oem_unlock_prop. It's readable by system_app which includes Settings apps. - ro.storage_manager.enabled This becomes storagemanagr_config_prop. It's readable by coredomain. Various domains in coredomain seem to read it. - sendbug.preferred.domain This bcomes sendbug_config_prop. It's readable by appdomain. There are still 3 more exported3_default_prop, which are going to be tracked individually. Bug: 155844385 Test: selinux denial check on Pixel devices Change-Id: I340c903ca7bda98a92d0f157c65f6833ed00df05
2020-07-16 15:25:47 +02:00
system_vendor_config_prop(storagemanager_config_prop)
Create surfaceflinger_prop and migrate props This is a subtask of removing exported*_prop. Bug: 152468529 Test: m && boot crosshatch Change-Id: I9d6ec7ade96a3a53288f23d155cc829c2107bb6f
2020-04-02 08:55:07 +02:00
system_vendor_config_prop(surfaceflinger_prop)
Make suspend_prop system_vendor_config_prop Bug: 185810834 Test: adb shell getprop suspend.short_suspend_threshold_millis Change-Id: I270057e5f81b220b7168573b516dd102650f11e1
2021-04-20 18:13:02 +02:00
system_vendor_config_prop(suspend_prop)
Rename exported2_config_prop to systemsound_config_prop Fixing bad names (exported*_prop) on property contexts. Bug: 152468650 Test: m sepolicy_tests Change-Id: Ie98212ee0fa89966e70faa83322b65b613f3b3f5
2020-04-01 03:01:16 +02:00
system_vendor_config_prop(systemsound_config_prop)
Add contexts for exported telephony props To remove bad context names, two contexts are added. - telephony_config_prop - telephony_status_prop exported_radio_prop, exported2_radio_prop are removed. Cleaning up exported3_radio_prop will be a follow-up task. Exempt-From-Owner-Approval: cherry-pick Bug: 152471138 Bug: 155844385 Test: boot and see no denials Test: usim works on blueline Change-Id: Iff9a4635c709f3ebe266cd811df3a1b4d3a242c2 Merged-In: Iff9a4635c709f3ebe266cd811df3a1b4d3a242c2 (cherry picked from commit 4d36eae8affaffce00063d37fe7f1d570cca1f1f)
2020-05-14 14:47:43 +02:00
system_vendor_config_prop(telephony_config_prop)
Add tombstone_config_prop and move related prop tombstoned.max_tombstone_coun becomes tombstone_config_prop to remove exported*_default_prop Bug: 155844385 Test: tombstoned is running and logcat shows no denials Change-Id: I57bebb5766d790dc52d40a6d106f480e0e34fa4e
2020-07-07 06:35:34 +02:00
system_vendor_config_prop(tombstone_config_prop)
Rename system_radio_prop For whatever reason sys.usb.config* has been labeled as system_radio_prop, which doesn't make sense. Changing context name as usb_prop. For the same reason exported_system_radio_prop is also renamed to usb-related names. Bug: 71814576 Bug: 154885206 Test: m selinux_policy Change-Id: If30bc620dbeac926a8b9bcde908357fda739a6c1 Merged-In: If30bc620dbeac926a8b9bcde908357fda739a6c1 (cherry picked from commit 44fbcdb677d040a7ff9949db8457347a5299b4a0)
2020-04-27 14:13:01 +02:00
system_vendor_config_prop(usb_config_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
system_vendor_config_prop(userspace_reboot_config_prop)
system_vendor_config_prop(vehicle_hal_prop)
system_vendor_config_prop(vendor_security_patch_level_prop)
Define sepolicy for redirect-socket-calls feature Define two property_context. 1. vendor_socket_hook_prop - for ro.vendor.redirect_socket_calls. The property set once in vendor_init context. It's evaluated at process start time and is cannot change at runtime on a given device. The set permission is restricted to vendor_init. The read permission is unrestricted. 2. socket_hook_prop - for net.redirect_socket_calls.hooked. The property can be changed by System Server at runtime. It's evaluated when shimmed socket functions is called. The set permission is restricted to System Server. The read permission is unrestricted. Bug: Bug: 141611769 Test: System Server can set net.redirect_socket_calls.hooked libnetd_client can read both properties libnetd_client can't set both properties Change-Id: Ic42269539923e6930cc0ee3df8ba032797212395
2020-02-10 10:43:15 +01:00
system_vendor_config_prop(vendor_socket_hook_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
system_vendor_config_prop(virtual_ab_prop)
Rename exported and exported2 vold prop This is a subtask to clean up bad context names "exported*_prop". Bug: 152469526 Test: m Change-Id: Ie2d4046732e9d6562294fa664dcd7f019aa7c229
2020-04-06 13:49:17 +02:00
system_vendor_config_prop(vndk_prop)
Add property contexts for vts props vts_config_prop and vts_status_prop are added to remove exported*_prop. ro.vts.coverage becomes vts_config_prop, and vts.native_server.on becomes vts_status_prop. Bug: 155844385 Test: Run some vts and then getprop, e.g. atest \ VtsHalAudioEffectV4_0TargetTest && adb shell getprop Test: ro.vts.coverage is read without denials Change-Id: Ic3532ef0ae7083db8d619d80e2b73249f87981ce
2020-07-13 19:10:37 +02:00
system_vendor_config_prop(vts_config_prop)
Rename exported and exported2 vold prop This is a subtask to clean up bad context names "exported*_prop". Bug: 152469526 Test: m Change-Id: Ie2d4046732e9d6562294fa664dcd7f019aa7c229
2020-04-06 13:49:17 +02:00
system_vendor_config_prop(vold_config_prop)
Move more properties out of exported3_default_prop This is to remove exported3_default_prop. Contexts of these properties are changed. - ro.boot.wificountrycode This becomes wifi_config_prop - ro.opengles.version This becomes graphics_config_prop. Also it's read by various domains, so graphics_config_prop is now readable from coredomain. - persist.config.calibration_fac This becomes camera_calibration_prop. It's only readable by appdomain. Bug: 155844385 Test: no denials on Pixel devices Test: connect wifi Change-Id: If2b6c10fa124e29d1612a8f94ae18b223849e2a9
2020-07-20 13:26:07 +02:00
system_vendor_config_prop(wifi_config_prop)
Rename context names of zram properties Moving from old bad name "exported*_prop". Bug: 154885206 Bug: 155844385 Test: m selinux_policy Change-Id: I21af42980e5e6e2c3cabea6c36825fa2836a55bc
2020-05-08 13:42:25 +02:00
system_vendor_config_prop(zram_config_prop)
Add zygote.critical_window.minute property This property controls the minimal timing window that triggers init process fatal abort, when the zygote service crashes repeatedly in it. Bug: 146818493 Change-Id: Ibd371be0daf6510df8b4d1a1f12f0aab8d6392c7
2020-05-12 18:50:50 +02:00
system_vendor_config_prop(zygote_config_prop)
Add DCK eligibility properties Bug: 186488185 Test: Confirm GMSCore access Change-Id: I20baf5c9ae9fbebc9e43d2798401ad49776fb74a
2021-05-21 03:06:03 +02:00
system_vendor_config_prop(dck_prop)
Add properties to configure whether the lazy tuner is enabled. ro.tuner.lazyhal: system_vendor_config_prop to decide whether the lazy tuner HAL is enabled. tuner.server.enable: system_internal_prop to decide whether tuner server should be enabled. Bug: 236002754 Test: Check tuner HAL and framework behavior Change-Id: I6a2ebced0e0261f669e7bda466f46556dedca016
2022-08-09 23:57:02 +02:00
system_vendor_config_prop(tuner_config_prop)
Add selinux permissions for ro.usb.uvc.enabled This CL the selinux rules for the property ro.usb.uvc.enabled which will be used to toggle UVC Gadget functionality on the Android Device. Bug: 242344221 Bug: 242344229 Test: Manually tested that the property can only be read at runtime, not written to. Change-Id: I0fd6051666d9554037acc68fa81226503f514a45
2023-01-24 08:46:42 +01:00
system_vendor_config_prop(usb_uvc_enabled_prop)
Move some properties to system_vendor_config_prop system_vendor_config_prop defines a property contexts which can only be set from vendor_init. It is one of the mostly used patterns of system properties. This migrates some properties to help readability and security. Bug: 148125056 Test: system/sepolicy/build_policies.sh Change-Id: I6b53ef520331b32417ad59f4daa04bdfc077f682
2020-02-08 00:34:17 +01:00
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
# Properties with no restrictions
Let adbd set service.adb.tcp.port. Commit 67c36884 changed the label of service.adb.tcp.port to allow vendor init to set it, but accidentally prevented adbd from setting it, which broke `adb tcpip`. Bug: http://b/171280882 Test: `adb tcpip` Change-Id: I154e2f43a4d3b72b27508ce02d66298673939738
2020-10-28 21:56:23 +01:00
system_public_prop(adbd_config_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(audio_prop)
system_public_prop(bluetooth_a2dp_offload_prop)
system_public_prop(bluetooth_audio_hal_prop)
system_public_prop(bluetooth_prop)
Allow BPF programs from vendor. Who needs all those context switches? bpfloader controls which types of vendor programs can be used. Bug: 140330870 Bug: 162057235 Test: successfully load bpf programs from vendor Change-Id: I36e4f6550da33fea5bad509470dfd39f301f13c8
2019-12-14 00:18:32 +01:00
system_public_prop(bpf_progs_loaded_prop)
Allow vendor charger to set sys.boot_from_charger_mode. This allows booting from charger mode directly without rebooting. Test: pass Bug: 203246116 Change-Id: I70d06c0f920c360f4ed6d776cfee98f234d6d97a
2021-10-27 09:02:24 +02:00
system_public_prop(charger_status_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(ctl_default_prop)
system_public_prop(ctl_interface_start_prop)
system_public_prop(ctl_start_prop)
system_public_prop(ctl_stop_prop)
Allow system server to set dynamic ART properties. This change gives a new type (dalvik_dynamic_config_prop) to some ART properties such as dalvik.vm.dex2oat-cpu-set and adds a new rule to allow system server to set them. Bug: 274530433 Test: Locally added some code to set those properties and saw it being successfull. Change-Id: Ie28602e9039b7647656594ce5c184d29778fa089
2023-03-30 16:50:05 +02:00
system_public_prop(dalvik_dynamic_config_prop)
Add new context dalvik_runtime_prop persist.sys.dalvik.vm.lib.2 is moved to a new context dalvik_runtime_prop from bad context name. Bug: 154885206 Test: boot device and see logcat Change-Id: I9dea95105c266088d5f071bf2d890048f0999b0b
2020-05-12 15:51:48 +02:00
system_public_prop(dalvik_runtime_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(debug_prop)
[MTE] Add memory_safety_native_boot namespace Bug: 267234468 Change-Id: I248fdf58a744f0c70a26d6a8f7d4caa0a6ce8edb
2023-02-01 00:47:07 +01:00
system_public_prop(device_config_memory_safety_native_boot_prop)
SELinux configuration for memory safety device configs. These will get read by system libraries in arbitrary processes, so it's a public property with read access by `domain`. Bug: 235129567 Change-Id: I1ab880626e4efa2affe90165ce94a404b918849d
2022-06-08 19:45:18 +02:00
system_public_prop(device_config_memory_safety_native_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(dumpstate_options_prop)
system_public_prop(exported_system_prop)
system_public_prop(exported_bluetooth_prop)
system_public_prop(exported_overlay_prop)
system_public_prop(exported_pm_prop)
Explicitly list "pm.dexopt." sysprops. Bug: 256639711 Test: m Change-Id: I5e6bd4fd8ec516a23f4e3a5658a651f04d40412c
2023-01-18 09:06:16 +01:00
system_public_prop(future_pm_prop)
Rename contexts of ffs props Bug: 71814576 Bug: 154885206 Test: m sepolicy_test Change-Id: Idacc3635851b14b833bccca177d784f4bb92c763
2020-04-27 16:49:15 +02:00
system_public_prop(ffs_control_prop)
Add System Property Controlling Animators Adding a new system property that will act as a toggle enabling/disabling the framework changes that were submitted to prevent leaked animators. Bug: 233391022 Test: manual. Merged-In: I57225feb50a3f3b4ac8c39998c47f263ae211b66 Change-Id: Ifc339efc1c3a5e19920b77d1f24bef19c39d5f44
2022-05-23 21:13:29 +02:00
system_public_prop(framework_status_prop)
Add rule for new gesture_prop. Bug: 209713977 Bug: 193467627 Test: local build and manual check. Signed-off-by: Super Liu <supercjliu@google.com> Change-Id: Ib1d2d6dcc7d6ddc6243c806a883d9252d7c081af
2021-12-13 02:57:20 +01:00
system_public_prop(gesture_prop)
Reland "Add persist.dumpstate.verbose_logging.enabled to system/..." This reverts commit 409c038d3c356c5a9eb418b966d08375c0b65f37. Reason for revert: fixed breakage Bug: 163759751 Test: lunch sdk; m selinux_policy Change-Id: I59d170cd3a764209d353d77372387fdc8719ea7f
2020-08-18 04:25:32 +02:00
system_public_prop(hal_dumpstate_config_prop)
Create new system property type for Factory OTA could write system property Due to Factory OTA client install in product partition but it also declare coredomian in its sepolicy setting. That will let Factory OTA unable to find a property type could write system property. But now Factory OTA have a restore NFC wake function need to write system property for communicate with bootloader. So we need to create a new property type in system framework which could allow Factory OTA client to write system property. Bug: 145178094 Test: Manual Change-Id: Ic549cc939893ec67a46bf28a23ebeb9f9b81bd0b
2019-12-06 08:59:58 +01:00
system_public_prop(sota_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(hwservicemanager_prop)
Add lmkd. property policies lmkd.reinit property allows vendors to trigger lmkd reinitialization. Add lmkd_prop to support lmkd.* properties inlcuding lmkd.reinit. Bug: 155149944 Test: setprop lmkd.reinit 1 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I6ba598bad7ebb40fd6f23de473f25f32e53c996d
2020-05-05 21:41:02 +02:00
system_public_prop(lmkd_prop)
Revert "Limit processes that can change settings sysprops" This reverts commit c5980699a486acce3102f1f08dd563a1fa802221. Reason for revert: Vendor code is setting timezone_prop Change-Id: Ib09e618745924bd95b4b9aa7106eb2e4cc7895eb
2022-09-28 10:52:46 +02:00
system_public_prop(locale_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(logd_prop)
system_public_prop(logpersistd_logging_prop)
system_public_prop(log_prop)
system_public_prop(log_tag_prop)
system_public_prop(lowpan_prop)
system_public_prop(nfc_prop)
Add a new context for property ota.warm_reset The property is set to inform kernel to do a warm_reset on the next reboot. This is useful to persist the logs to debug device boot failures. More details in http://go/rvc-ota-persist-logs. The property is set to 1 by update_engine after an OTA. And it's set to 0 by update_verifier or vold after we mark the current slot boot successful. The property is read by vendor_init. And according to its value, vendor_init writes a particular sysfs file to schedule a warm reset on the following reboot. Without the new context, the denial message says: [ 13.423163] audit: type=1107 audit(1746393.166:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read } for property=ota.warm_reset pid=0 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0' [ 23.096497] init: Unable to set property 'OTA.warm_reset' from uid:0 gid:2001 pid:841: SELinux permission check failed [ 23.096574] type=1107 audit(1573768000.668:42): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=OTA.warm_reset pid=841 uid=0 gid=2001 scontext=u:r:update_verifier:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0' [ 23.108430] update_verifier: Failed to reset the warm reset flag Bug: 143489994 Test: check the property can be set by update_engine, and read by vendor_init Change-Id: I87c12a53a138b72ecfed3ab6a4d846c20f5a8484
2019-11-14 23:18:40 +01:00
system_public_prop(ota_prop)
Add property for MTE permissive mode. Bug: 202037138 Change-Id: I272996f124ca8391f9312150d1d8757751fe6acb
2022-05-20 20:25:26 +02:00
system_public_prop(permissive_mte_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(powerctl_prop)
Revert^2 "Add qemu.hw.mainkeys to system property_contexts" 509b35e5d9b72f725d17fab35ecb11b9b706a399 Bug: 180412668 Merged-In: I4067bba36613fa41e3c7a085da76cda4784753ad Change-Id: I4067bba36613fa41e3c7a085da76cda4784753ad
2021-02-17 18:54:30 +01:00
system_public_prop(qemu_hw_prop)
Move qemu.sf.lcd_density into system/sepolicy qemu.sf.lcd_density is rerefenced by surfaceflinger and zygote. Bug: 178144237 Test: presubmit Signed-off-by: Roman Kiryanov <rkir@google.com> Change-Id: Iede75d1170aeac9d020d60a3a66a1f69cee46abf Merged-In: Iede75d1170aeac9d020d60a3a66a1f69cee46abf
2021-02-24 00:08:56 +01:00
system_public_prop(qemu_sf_lcd_density_prop)
Rename exported3_radio_prop to radio_control_prop The context name exported3_radio_prop is ambiguous and does not reflect the usage and role of the properties. This changes its name to radio_control_prop. Some downstream branches are still using exported3_radio_prop, so get_prop(domain, radio_control_prop) is added to avoid regression. It's just a workaround and to be removed soon, after all exported3_radio_prop are cleaned up. Bug: 162214733 Test: boot a device with a sim and see basic functions work Change-Id: If5fe3be7c64b36435c4ad0dc9a8089077295d502 Merged-In: If5fe3be7c64b36435c4ad0dc9a8089077295d502
2020-07-28 08:17:24 +02:00
system_public_prop(radio_control_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(radio_prop)
system_public_prop(serialno_prop)
Rename surfaceflinger properties' contexts Cleaning up exported*_system_prop and moving surfaceflinger properties to new property contexts. Bug: 152468529 Bug: 154885206 Test: boot cf_x86 and crosshatch Change-Id: I7f8a684e9cbabce2f55a5292d7b2283ac0716cd9
2020-04-24 14:25:17 +02:00
system_public_prop(surfaceflinger_color_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(system_prop)
Allow apps to read system_user_mode_emulation_prop. As it's used by UserManager... Test: sesearch --allow -s appdomain -t system_user_mode_emulation_prop $ANDROID_PRODUCT_OUT/vendor/etc/selinux/precompiled_sepolicy Bug: 226643927 Change-Id: I1134a9e0b8ae758e3ebef054b96f9e3237a2401f
2022-04-22 02:49:05 +02:00
system_public_prop(system_user_mode_emulation_prop)
Add contexts for exported telephony props To remove bad context names, two contexts are added. - telephony_config_prop - telephony_status_prop exported_radio_prop, exported2_radio_prop are removed. Cleaning up exported3_radio_prop will be a follow-up task. Exempt-From-Owner-Approval: cherry-pick Bug: 152471138 Bug: 155844385 Test: boot and see no denials Test: usim works on blueline Change-Id: Iff9a4635c709f3ebe266cd811df3a1b4d3a242c2 Merged-In: Iff9a4635c709f3ebe266cd811df3a1b4d3a242c2 (cherry picked from commit 4d36eae8affaffce00063d37fe7f1d570cca1f1f)
2020-05-14 14:47:43 +02:00
system_public_prop(telephony_status_prop)
Revert "Limit processes that can change settings sysprops" This reverts commit c5980699a486acce3102f1f08dd563a1fa802221. Reason for revert: Vendor code is setting timezone_prop Change-Id: Ib09e618745924bd95b4b9aa7106eb2e4cc7895eb
2022-09-28 10:52:46 +02:00
system_public_prop(timezone_prop)
Rename system_radio_prop For whatever reason sys.usb.config* has been labeled as system_radio_prop, which doesn't make sense. Changing context name as usb_prop. For the same reason exported_system_radio_prop is also renamed to usb-related names. Bug: 71814576 Bug: 154885206 Test: m selinux_policy Change-Id: If30bc620dbeac926a8b9bcde908357fda739a6c1 Merged-In: If30bc620dbeac926a8b9bcde908357fda739a6c1 (cherry picked from commit 44fbcdb677d040a7ff9949db8457347a5299b4a0)
2020-04-27 14:13:01 +02:00
system_public_prop(usb_control_prop)
Fix permissions for vold.post_fs_data_done The system property "vold.post_fs_data_done" is used by init and vold to communicate with each other in order to set up FDE on devices that use FDE. It needs to be gettable and settable by vold, and settable by init and vendor_init. This was the case in Android 11 and earlier; however, the change https://android-review.googlesource.com/c/platform/system/sepolicy/+/1277447 ("Rename exported and exported2 vold prop") broke this by giving this property the type "vold_config_prop", which made it no longer settable by vold. Since none of the existing property types appear to be appropriate for this particular property, define a new type "vold_post_fs_data_prop" and grant the needed domains permission to get/set it. This is one of a set of changes that is needed to get FDE working again so that devices that launched with FDE can be upgraded to Android 12. Bug: 186165644 Test: Tested FDE on Cuttlefish Change-Id: I2fd8af0091f8b921ec37381ad3b85a156d074566
2021-04-23 01:09:56 +02:00
system_public_prop(vold_post_fs_data_prop)
Add wifi_hal_prop and remove exported_wifi_prop To remove bad context names "exported*_prop" Bug: 155844385 Test: boot and see no denials Change-Id: Icd30be64355699618735d4012461835eca8cd651 Merged-In: Icd30be64355699618735d4012461835eca8cd651 (cherry picked from commit 37c2d4d0c9669f3c7590f3dfccfac3c9725d1b5a) (cherry picked from commit 3b66e9b9f855ad0694efed405a30d64265854784)
2020-06-25 14:20:42 +02:00
system_public_prop(wifi_hal_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
system_public_prop(wifi_log_prop)
system_public_prop(wifi_prop)
Rename context names of zram properties Moving from old bad name "exported*_prop". Bug: 154885206 Bug: 155844385 Test: m selinux_policy Change-Id: I21af42980e5e6e2c3cabea6c36825fa2836a55bc
2020-05-08 13:42:25 +02:00
system_public_prop(zram_control_prop)
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
Revert^2 "Make default_prop only readable from coredomain" This reverts commit 32fbfbc016144f258ab8e11311611141a39830c3. Reason for revert: Fixed breakages Change-Id: I474ee7dd7b82b4f2e02353e8a3fb55e3c410941f
2021-01-14 05:08:16 +01:00
# Properties which don't have entries on property_contexts
system_internal_prop(default_prop)
rebootescrow: allow use of block file pmem uses a block file while access_ramoops uses a char file. Allow both for now until we can unify on pmem. Additionally allow the reading of vendor properties so it can read the path to the character or block device to open. Test: atest VtsHalRebootEscrowTargetTest Bug: 146400078 Change-Id: Ief61534e0946480a01c635ce1672579959ec8db5
2020-01-25 01:31:58 +01:00
# Properties used in default HAL implementations
vendor_internal_prop(rebootescrow_hal_prop)
Add sysprops for virtual Fingerprint/Face HAL Test: Manually verified virtual Fingerprint/Face HAL could set/get props Bug: 230514750 Change-Id: I7ab5ff81d128b486ef181824c67cfa0ded230e08
2022-05-13 19:15:38 +02:00
# Properties used in the default Face HAL implementations
vendor_internal_prop(virtual_face_hal_prop)
# Properties used in the default Fingerprint HAL implementations
vendor_internal_prop(virtual_fingerprint_hal_prop)
rebootescrow: allow use of block file pmem uses a block file while access_ramoops uses a char file. Allow both for now until we can unify on pmem. Additionally allow the reading of vendor properties so it can read the path to the character or block device to open. Test: atest VtsHalRebootEscrowTargetTest Bug: 146400078 Change-Id: Ief61534e0946480a01c635ce1672579959ec8db5
2020-01-25 01:31:58 +01:00
sepolicy(hal_wifi): Allow wifi HAL to access persist.vendor.debug properties We want to tweak some device params at runtime via shell (alleviates the need to recompile HAL for changing device configuration). This will help us test/teamfood couple of new features under development. Bug: 173044646 Test: Wifi HAL can read persist.vendor.debug.wifi properties. Change-Id: Iabd07e72aa5f0d97519a37d0ebb1e0a3458b6d06
2020-11-12 23:21:41 +01:00
vendor_public_prop(persist_vendor_debug_wifi_prop)
Make public for exported properties on old devices Properties which are already allowed to be written by vendor_init can't be internal or restricted prop. This sets the properties as public except for forbidden ones on vendor_init.te. Bug: 131162102 Test: system/sepolicy/tools/build_policies.sh Change-Id: Icc1e813e78a48856adee26fb20f01300713e1d30
2019-10-17 06:42:42 +02:00
# Properties which are public for devices launching with Android O or earlier
# This should not be used for any new properties.
not_compatible_property(`
# DO NOT ADD ANY PROPERTIES HERE
system_public_prop(boottime_prop)
system_public_prop(charger_prop)
system_public_prop(cold_boot_done_prop)
system_public_prop(ctl_adbd_prop)
system_public_prop(ctl_apexd_prop)
system_public_prop(ctl_bootanim_prop)
system_public_prop(ctl_bugreport_prop)
system_public_prop(ctl_console_prop)
system_public_prop(ctl_dumpstate_prop)
system_public_prop(ctl_fuse_prop)
system_public_prop(ctl_gsid_prop)
system_public_prop(ctl_interface_restart_prop)
system_public_prop(ctl_interface_stop_prop)
system_public_prop(ctl_mdnsd_prop)
system_public_prop(ctl_restart_prop)
system_public_prop(ctl_rildaemon_prop)
system_public_prop(ctl_sigstop_prop)
system_public_prop(dynamic_system_prop)
system_public_prop(heapprofd_enabled_prop)
system_public_prop(llkd_prop)
system_public_prop(lpdumpd_prop)
system_public_prop(mmc_prop)
system_public_prop(mock_ota_prop)
system_public_prop(net_dns_prop)
system_public_prop(overlay_prop)
system_public_prop(persistent_properties_ready_prop)
system_public_prop(safemode_prop)
system_public_prop(system_lmk_prop)
system_public_prop(system_trace_prop)
system_public_prop(test_boot_reason_prop)
system_public_prop(time_prop)
system_public_prop(traced_enabled_prop)
system_public_prop(traced_lazy_prop)
system_public_prop(config_prop)
system_public_prop(cppreopt_prop)
system_public_prop(dalvik_prop)
system_public_prop(debuggerd_prop)
system_public_prop(device_logging_prop)
system_public_prop(dhcp_prop)
system_public_prop(dumpstate_prop)
system_public_prop(exported3_system_prop)
system_public_prop(exported_dumpstate_prop)
system_public_prop(exported_secure_prop)
system_public_prop(heapprofd_prop)
system_public_prop(net_radio_prop)
system_public_prop(pan_result_prop)
system_public_prop(persist_debug_prop)
system_public_prop(shell_prop)
system_public_prop(test_harness_prop)
system_public_prop(theme_prop)
system_public_prop(use_memfd_prop)
system_public_prop(vold_prop)
')
Reland "Add vendor_property_type to vendor_default_prop" This reverts commit 80d62271144006af04786ac547c46905c83b2db0. Reason for revert: fixed build error Bug: 131162102 Test: m selinux_policy sepolicy.recovery Change-Id: Ic974f54acd3471bf7bf8c09d8392f2dd7a248f41
2020-10-07 04:33:37 +02:00
not_compatible_property(`
vendor_public_prop(vendor_default_prop)
')
compatible_property_only(`
vendor_internal_prop(vendor_default_prop)
')
Whitelist exported platform properties This CL lists all the exported platform properties in private/exported_property_contexts. Additionally accessing core_property_type from vendor components is restricted. Instead public_readable_property_type is used to allow vendor components to read exported platform properties, and accessibility from vendor_init is also specified explicitly. Note that whitelisting would be applied only if PRODUCT_COMPATIBLE_PROPERTY is set on. Bug: 38146102 Test: tested on walleye with PRODUCT_COMPATIBLE_PROPERTY=true Change-Id: I304ba428cc4ca82668fec2ddeb17c971e7ec065e
2017-10-19 09:54:49 +02:00
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
typeattribute log_prop log_property_type;
typeattribute log_tag_prop log_property_type;
typeattribute wifi_log_prop log_property_type;
Support fine grain read access control for properties Properties are now broken up from a single /dev/__properties__ file into multiple files, one per property label. This commit provides the mechanism to control read access to each of these files and therefore sets of properties. This allows full access for all domains to each of these new property files to match the current permissions of /dev/__properties__. Future commits will restrict the access. Bug: 21852512 Change-Id: Ie9e43968acc7ac3b88e354a0bdfac75b8a710094
2015-12-02 01:58:27 +01:00
allow property_type tmpfs:filesystem associate;
Do not allow new additions to core_property_type core_property_type is an attribute which was given to all existing properties known to core SELinux policy. Any property with this label is readable to all SELinux domains, which is overly broad. The long term goal is to remove the core_property_type attribute entirely. Add a neverallow rule prohibiting the introduction of new properties with the core_property_type attribute. Device specific properties, or new properties in core SELinux policy, should not have this attribute. Test: policy compiles Change-Id: Ie89a9f0d81c8561616001ff8451496ce2278dbb2
2016-12-14 00:59:33 +01:00
# core_property_type should not be used for new properties or
# device specific properties. Properties with this attribute
# are readable to everyone, which is overly broad and should
# be avoided.
# New properties should have appropriate read / write access
# control rules written.
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
typeattribute audio_prop core_property_type;
typeattribute config_prop core_property_type;
typeattribute cppreopt_prop core_property_type;
typeattribute dalvik_prop core_property_type;
typeattribute debuggerd_prop core_property_type;
typeattribute debug_prop core_property_type;
typeattribute dhcp_prop core_property_type;
typeattribute dumpstate_prop core_property_type;
typeattribute logd_prop core_property_type;
typeattribute net_radio_prop core_property_type;
typeattribute nfc_prop core_property_type;
Add a new context for property ota.warm_reset The property is set to inform kernel to do a warm_reset on the next reboot. This is useful to persist the logs to debug device boot failures. More details in http://go/rvc-ota-persist-logs. The property is set to 1 by update_engine after an OTA. And it's set to 0 by update_verifier or vold after we mark the current slot boot successful. The property is read by vendor_init. And according to its value, vendor_init writes a particular sysfs file to schedule a warm reset on the following reboot. Without the new context, the denial message says: [ 13.423163] audit: type=1107 audit(1746393.166:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { read } for property=ota.warm_reset pid=0 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:default_prop:s0 tclass=file permissive=0' [ 23.096497] init: Unable to set property 'OTA.warm_reset' from uid:0 gid:2001 pid:841: SELinux permission check failed [ 23.096574] type=1107 audit(1573768000.668:42): uid=0 auid=4294967295 ses=4294967295 subj=u:r:init:s0 msg='avc: denied { set } for property=OTA.warm_reset pid=841 uid=0 gid=2001 scontext=u:r:update_verifier:s0 tcontext=u:object_r:default_prop:s0 tclass=property_service permissive=0' [ 23.108430] update_verifier: Failed to reset the warm reset flag Bug: 143489994 Test: check the property can be set by update_engine, and read by vendor_init Change-Id: I87c12a53a138b72ecfed3ab6a4d846c20f5a8484
2019-11-14 23:18:40 +01:00
typeattribute ota_prop core_property_type;
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
typeattribute pan_result_prop core_property_type;
typeattribute persist_debug_prop core_property_type;
typeattribute powerctl_prop core_property_type;
typeattribute radio_prop core_property_type;
typeattribute restorecon_prop core_property_type;
typeattribute shell_prop core_property_type;
typeattribute system_prop core_property_type;
Rename system_radio_prop For whatever reason sys.usb.config* has been labeled as system_radio_prop, which doesn't make sense. Changing context name as usb_prop. For the same reason exported_system_radio_prop is also renamed to usb-related names. Bug: 71814576 Bug: 154885206 Test: m selinux_policy Change-Id: If30bc620dbeac926a8b9bcde908357fda739a6c1 Merged-In: If30bc620dbeac926a8b9bcde908357fda739a6c1 (cherry picked from commit 44fbcdb677d040a7ff9949db8457347a5299b4a0)
2020-04-27 14:13:01 +02:00
typeattribute usb_prop core_property_type;
Add attributes for exported properties This introduces some attributes that can be used to restrict access to exported properties so that one can easily check from which the properties can be accessed, and that OEMs can extend their own exported properties. Bug: 71814576 Bug: 131162102 Test: boot aosp_cf_x86_phone-userdebug Test: logcat | grep "avc: " Change-Id: I6f988ec1cb94fa64563ca6cb91b7702da5d604e3
2019-09-09 12:46:15 +02:00
typeattribute vold_prop core_property_type;
Allow system server to set dynamic ART properties. This change gives a new type (dalvik_dynamic_config_prop) to some ART properties such as dalvik.vm.dex2oat-cpu-set and adds a new rule to allow system server to set them. Bug: 274530433 Test: Locally added some code to set those properties and saw it being successfull. Change-Id: Ie28602e9039b7647656594ce5c184d29778fa089
2023-03-30 16:50:05 +02:00
typeattribute dalvik_config_prop dalvik_config_prop_type;
typeattribute dalvik_dynamic_config_prop dalvik_config_prop_type;
Reference in a new issue Copy permalink