Merge "sepolicy updates for adding native flag namespace for lmkd" am: 6d0f93af27
am: 001dc104c8
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1786669 Change-Id: I38688b1dffd50f1f70fe35183fa8c9a78e86abb8
This commit is contained in:
commit
1a8547d3ff
5 changed files with 8 additions and 0 deletions
|
@ -7,6 +7,7 @@ set_prop(flags_health_check, device_config_reset_performed_prop)
|
|||
set_prop(flags_health_check, device_config_runtime_native_boot_prop)
|
||||
set_prop(flags_health_check, device_config_runtime_native_prop)
|
||||
set_prop(flags_health_check, device_config_input_native_boot_prop)
|
||||
set_prop(flags_health_check, device_config_lmkd_native_prop)
|
||||
set_prop(flags_health_check, device_config_netd_native_prop)
|
||||
set_prop(flags_health_check, device_config_activity_manager_native_boot_prop)
|
||||
set_prop(flags_health_check, device_config_media_native_prop)
|
||||
|
|
|
@ -8,6 +8,9 @@ set_prop(lmkd, system_lmk_prop)
|
|||
# Set lmkd.* properties.
|
||||
set_prop(lmkd, lmkd_prop)
|
||||
|
||||
# Get persist.device_config.lmk_native.* properties.
|
||||
get_prop(lmkd, device_config_lmkd_native_prop)
|
||||
|
||||
allow lmkd fs_bpf:dir search;
|
||||
allow lmkd fs_bpf:file read;
|
||||
allow lmkd bpfloader:bpf map_read;
|
||||
|
|
|
@ -1,6 +1,7 @@
|
|||
# Properties used only in /system
|
||||
system_internal_prop(adbd_prop)
|
||||
system_internal_prop(ctl_snapuserd_prop)
|
||||
system_internal_prop(device_config_lmkd_native_prop)
|
||||
system_internal_prop(device_config_profcollect_native_boot_prop)
|
||||
system_internal_prop(device_config_statsd_native_prop)
|
||||
system_internal_prop(device_config_statsd_native_boot_prop)
|
||||
|
|
|
@ -238,6 +238,7 @@ persist.device_config.attempted_boot_count u:object_r:device_config_boo
|
|||
persist.device_config.configuration. u:object_r:device_config_configuration_prop:s0
|
||||
persist.device_config.connectivity. u:object_r:device_config_connectivity_prop:s0
|
||||
persist.device_config.input_native_boot. u:object_r:device_config_input_native_boot_prop:s0
|
||||
persist.device_config.lmkd_native. u:object_r:device_config_lmkd_native_prop:s0
|
||||
persist.device_config.media_native. u:object_r:device_config_media_native_prop:s0
|
||||
persist.device_config.netd_native. u:object_r:device_config_netd_native_prop:s0
|
||||
persist.device_config.profcollect_native_boot. u:object_r:device_config_profcollect_native_boot_prop:s0
|
||||
|
|
|
@ -698,6 +698,7 @@ set_prop(system_server, device_config_netd_native_prop)
|
|||
set_prop(system_server, device_config_activity_manager_native_boot_prop)
|
||||
set_prop(system_server, device_config_runtime_native_boot_prop)
|
||||
set_prop(system_server, device_config_runtime_native_prop)
|
||||
set_prop(system_server, device_config_lmkd_native_prop)
|
||||
set_prop(system_server, device_config_media_native_prop)
|
||||
set_prop(system_server, device_config_profcollect_native_boot_prop)
|
||||
set_prop(system_server, device_config_statsd_native_prop)
|
||||
|
@ -1213,6 +1214,7 @@ neverallow {
|
|||
device_config_activity_manager_native_boot_prop
|
||||
device_config_connectivity_prop
|
||||
device_config_input_native_boot_prop
|
||||
device_config_lmkd_native_prop
|
||||
device_config_netd_native_prop
|
||||
device_config_runtime_native_boot_prop
|
||||
device_config_runtime_native_prop
|
||||
|
|
Loading…
Reference in a new issue