diff --git a/private/compat/27.0/27.0.ignore.cil b/private/compat/27.0/27.0.ignore.cil index 59b93da77..a42538fbe 100644 --- a/private/compat/27.0/27.0.ignore.cil +++ b/private/compat/27.0/27.0.ignore.cil @@ -111,6 +111,7 @@ iorapd_exec iorapd_service iorapd_tmpfs + keyguard_config_prop last_boot_reason_prop libc_debug_prop llkd diff --git a/private/compat/30.0/30.0.cil b/private/compat/30.0/30.0.cil index 4c2a7a299..c99cecd9e 100644 --- a/private/compat/30.0/30.0.cil +++ b/private/compat/30.0/30.0.cil @@ -1361,6 +1361,7 @@ camera_config_prop drm_service_config_prop hdmi_config_prop + keyguard_config_prop lmkd_config_prop media_config_prop mediadrm_config_prop diff --git a/private/platform_app.te b/private/platform_app.te index ba6de5b43..8163d15ab 100644 --- a/private/platform_app.te +++ b/private/platform_app.te @@ -87,6 +87,9 @@ allow platform_app system_server:udp_socket { # allow platform apps to connect to the property service set_prop(platform_app, test_boot_reason_prop) +# allow platform apps to read keyguard.no_require_sim +get_prop(platform_app, keyguard_config_prop) + # allow platform apps to create symbolic link allow platform_app app_data_file:lnk_file create_file_perms; diff --git a/private/property.te b/private/property.te index 77d3dffed..6f984eca8 100644 --- a/private/property.te +++ b/private/property.te @@ -412,3 +412,8 @@ neverallow { -appdomain -vendor_init } packagemanager_config_prop:file no_rw_file_perms; + +neverallow { + -coredomain + -vendor_init +} keyguard_config_prop:file no_rw_file_perms; diff --git a/private/property_contexts b/private/property_contexts index d56c89c38..ae55b31cf 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -342,7 +342,7 @@ dalvik.vm.zygote.max-boot-retry u:object_r:dalvik_config_prop:s0 e persist.sys.dalvik.vm.lib.2 u:object_r:dalvik_runtime_prop:s0 exact string -keyguard.no_require_sim u:object_r:exported3_default_prop:s0 exact bool +keyguard.no_require_sim u:object_r:keyguard_config_prop:s0 exact bool media.recorder.show_manufacturer_and_model u:object_r:exported3_default_prop:s0 exact bool diff --git a/public/property.te b/public/property.te index aeb83f6b2..4d002a683 100644 --- a/public/property.te +++ b/public/property.te @@ -119,6 +119,7 @@ system_vendor_config_prop(ffs_config_prop) system_vendor_config_prop(graphics_config_prop) system_vendor_config_prop(hdmi_config_prop) system_vendor_config_prop(incremental_prop) +system_vendor_config_prop(keyguard_config_prop) system_vendor_config_prop(lmkd_config_prop) system_vendor_config_prop(media_config_prop) system_vendor_config_prop(media_variant_prop)