Remove init.apex.<apex-name>.load/unload property

Bug: 240533726
Test: atest CtsInitTestCases ApexTestCases
Change-Id: Ibe4d1c199157397a747bb87918848917a24f0535
This commit is contained in:
Deyao Ren 2022-08-30 19:14:51 +00:00
parent 23b5027d30
commit 3fab00fab2
4 changed files with 1 additions and 13 deletions

View file

@ -133,7 +133,6 @@ set_prop(apexd, ctl_apexd_prop)
# Allow apexd to send control messages to load/unload apex from init
set_prop(apexd, ctl_apex_load_prop)
get_prop(apexd, init_apex_status_private_prop)
# Find the vold service, and call into vold to manage FS checkpoints
allow apexd vold_service:service_manager find;

View file

@ -7,7 +7,6 @@ get_prop(coredomain, ffs_config_prop)
get_prop(coredomain, graphics_config_prop)
get_prop(coredomain, hdmi_config_prop)
get_prop(coredomain, init_service_status_private_prop)
get_prop(coredomain, init_apex_status_private_prop)
get_prop(coredomain, lmkd_config_prop)
get_prop(coredomain, localization_prop)
get_prop(coredomain, pm_prop)

View file

@ -46,7 +46,6 @@ system_internal_prop(ctl_mediatranscoding_prop)
system_internal_prop(ctl_odsign_prop)
system_internal_prop(virtualizationservice_prop)
system_internal_prop(ctl_apex_load_prop)
system_internal_prop(init_apex_status_private_prop)
# Properties which can't be written outside system
system_restricted_prop(device_config_virtualization_framework_native_prop)
@ -629,11 +628,6 @@ neverallow {
-shell
} rollback_test_prop:property_service set;
neverallow {
domain
-init
} init_apex_status_private_prop:property_service set;
neverallow {
domain
-init
@ -646,7 +640,7 @@ neverallow {
-init
-dumpstate
-apexd
} {init_apex_status_private_prop ctl_apex_load_prop}:file no_rw_file_perms;
} ctl_apex_load_prop:file no_rw_file_perms;
neverallow {
# Only allow init and profcollectd to access profcollectd_node_id_prop

View file

@ -739,10 +739,6 @@ init.svc.surfaceflinger u:object_r:init_service_status_prop:s0 exact string
init.svc.tombstoned u:object_r:init_service_status_prop:s0 exact string
init.svc.zygote u:object_r:init_service_status_prop:s0 exact string
# apexd reads this property to check if init has done with ctl.apex_* messages
# This should be the form of init.apex.<apex_name>.
init.apex. u:object_r:init_apex_status_private_prop:s0 prefix enum loaded unloaded
libc.debug.malloc.options u:object_r:libc_debug_prop:s0 exact string
libc.debug.malloc.program u:object_r:libc_debug_prop:s0 exact string
libc.debug.hooks.enable u:object_r:libc_debug_prop:s0 exact string