2017-03-23 22:27:32 +01:00
|
|
|
typeattribute bootstat coredomain;
|
|
|
|
|
|
2016-07-22 22:13:11 +02:00
|
|
|
init_daemon_domain(bootstat)
|
2020-03-04 09:20:35 +01:00
|
|
|
|
|
|
|
|
# Collect metrics on boot time created by init
|
|
|
|
|
get_prop(bootstat, boottime_prop)
|
|
|
|
|
|
|
|
|
|
# Read/Write [persist.]sys.boot.reason and ro.boot.bootreason (write if empty)
|
|
|
|
|
set_prop(bootstat, bootloader_boot_reason_prop)
|
|
|
|
|
set_prop(bootstat, system_boot_reason_prop)
|
|
|
|
|
set_prop(bootstat, last_boot_reason_prop)
|
|
|
|
|
|
|
|
|
|
neverallow {
|
|
|
|
|
domain
|
|
|
|
|
-bootanim
|
|
|
|
|
-bootstat
|
|
|
|
|
-dumpstate
|
2020-04-09 23:43:00 +02:00
|
|
|
userdebug_or_eng(`-incidentd')
|
2020-03-04 09:20:35 +01:00
|
|
|
-init
|
|
|
|
|
-recovery
|
|
|
|
|
-shell
|
|
|
|
|
-system_server
|
|
|
|
|
} { bootloader_boot_reason_prop last_boot_reason_prop }:file r_file_perms;
|
|
|
|
|
# ... and refine, as these components should not set the last boot reason
|
|
|
|
|
neverallow { bootanim recovery } last_boot_reason_prop:file r_file_perms;
|
|
|
|
|
|
|
|
|
|
neverallow {
|
|
|
|
|
domain
|
|
|
|
|
-bootstat
|
|
|
|
|
-init
|
|
|
|
|
-system_server
|
|
|
|
|
} { bootloader_boot_reason_prop last_boot_reason_prop }:property_service set;
|
|
|
|
|
# ... and refine ... for a ro propertly no less ... keep this _tight_
|
|
|
|
|
neverallow system_server bootloader_boot_reason_prop:property_service set;
|
