tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add set property permissions to RKPD application.

Browse source 
Test: atest RkpdAppGoogleIntegrationTests
Change-Id: Ib1680319f7299b27aab2cc36cc917a8da35ec216
This commit is contained in:
Vikram Gaur 2023-03-16 01:41:29 +00:00
parent 15c64f5a21
commit 01390087b1
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/property.te
View file

@ -633,6 +633,7 @@ neverallow {
-init
-remote_prov_app
-shell
-rkpdapp
} remote_prov_prop:property_service set;
neverallow {

2
private/rkpd_app.te
View file

@ -12,7 +12,7 @@ hal_client_domain(rkpdapp, hal_keymint)
# Grant access to certain system properties related to RKP
get_prop(rkpdapp, device_config_remote_key_provisioning_native_prop)
get_prop(rkpdapp, remote_prov_prop)
set_prop(rkpdapp, remote_prov_prop)
# Grant access to the normal services that are available to all apps
allow rkpdapp app_api_service:service_manager find;