tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow graphics_config_writable_prop to be modified.

Browse source 
vendor_init needs to set graphics_config_writable_prop, moving it to
system_public_prop.

Bug: b/270994705
Test: atest CtsAngleIntegrationHostTestCases
Test: m && boot
Change-Id: I2f47c1048aad4565cb13d4289b9a018734d18c07
This commit is contained in:
Peiyong Lin 2023-05-03 17:12:39 +00:00
parent 6c6f53b1a8
commit 54229d8157
4 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/gpuservice.te
View file

@ -64,6 +64,8 @@ add_service(gpuservice, gpu_service)
# Needed for enabling write access to persist.graphics.egl from developer option switch UI, through gpuservice. # Needed for enabling write access to persist.graphics.egl from developer option switch UI, through gpuservice.
set_prop(gpuservice, graphics_config_writable_prop) set_prop(gpuservice, graphics_config_writable_prop)
neverallow { domain -init -vendor_init -gpuservice } graphics_config_writable_prop:property_service set;
# Needed for querying permission # Needed for querying permission
allow gpuservice permission_service:service_manager find; allow gpuservice permission_service:service_manager find;

2
public/property.te
View file

@ -101,7 +101,6 @@ system_restricted_prop(usb_prop)
system_restricted_prop(userspace_reboot_exported_prop) system_restricted_prop(userspace_reboot_exported_prop)
system_restricted_prop(vold_status_prop) system_restricted_prop(vold_status_prop)
system_restricted_prop(vts_status_prop) system_restricted_prop(vts_status_prop)
system_restricted_prop(graphics_config_writable_prop)
compatible_property_only(` compatible_property_only(`
@ -223,6 +222,7 @@ system_public_prop(future_pm_prop)
system_public_prop(ffs_control_prop) system_public_prop(ffs_control_prop)
system_public_prop(framework_status_prop) system_public_prop(framework_status_prop)
system_public_prop(gesture_prop) system_public_prop(gesture_prop)
system_public_prop(graphics_config_writable_prop)
system_public_prop(hal_dumpstate_config_prop) system_public_prop(hal_dumpstate_config_prop)
system_public_prop(sota_prop) system_public_prop(sota_prop)
system_public_prop(hwservicemanager_prop) system_public_prop(hwservicemanager_prop)

1
public/vendor_init.te
View file

@ -251,6 +251,7 @@ set_prop(vendor_init, lmkd_prop)
set_prop(vendor_init, logd_prop) set_prop(vendor_init, logd_prop)
set_prop(vendor_init, log_tag_prop) set_prop(vendor_init, log_tag_prop)
set_prop(vendor_init, log_prop) set_prop(vendor_init, log_prop)
set_prop(vendor_init, graphics_config_writable_prop)
set_prop(vendor_init, qemu_hw_prop) set_prop(vendor_init, qemu_hw_prop)
set_prop(vendor_init, radio_control_prop) set_prop(vendor_init, radio_control_prop)
set_prop(vendor_init, rebootescrow_hal_prop) set_prop(vendor_init, rebootescrow_hal_prop)

1
vendor/hal_camera_default.te vendored
View file

@ -13,6 +13,7 @@ get_prop(hal_camera_default, device_config_camera_native_prop);
# Allow reading graphics properties, specifically for EGL blobcache mode # Allow reading graphics properties, specifically for EGL blobcache mode
get_prop(hal_camera_default, graphics_config_prop); get_prop(hal_camera_default, graphics_config_prop);
get_prop(hal_camera_default, graphics_config_writable_prop);
# For collecting bugreports. # For collecting bugreports.
allow hal_camera_default dumpstate:fd use; allow hal_camera_default dumpstate:fd use;