diff --git a/private/compat/32.0/32.0.ignore.cil b/private/compat/32.0/32.0.ignore.cil index 3547ebb33..ceb54b158 100644 --- a/private/compat/32.0/32.0.ignore.cil +++ b/private/compat/32.0/32.0.ignore.cil @@ -25,6 +25,7 @@ extra_free_kbytes extra_free_kbytes_exec fs_bpf_vendor + game_mode_intervention_list_file gesture_prop hal_contexthub_service hal_camera_service diff --git a/private/file_contexts b/private/file_contexts index e2ffbc089..b07583931 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -527,6 +527,7 @@ /data/(.*)? u:object_r:system_data_file:s0 /data/system/environ(/.*)? u:object_r:environ_system_data_file:s0 /data/system/packages\.list u:object_r:packages_list_file:s0 +/data/system/game_mode_intervention\.list u:object_r:game_mode_intervention_list_file:s0 /data/unencrypted(/.*)? u:object_r:unencrypted_data_file:s0 /data/backup(/.*)? u:object_r:backup_data_file:s0 /data/secure/backup(/.*)? u:object_r:backup_data_file:s0 diff --git a/private/system_server.te b/private/system_server.te index d2bc3aebf..7ca601939 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -472,6 +472,7 @@ allow system_server ota_package_file:file create_file_perms; allow system_server system_data_file:dir create_dir_perms; allow system_server system_data_file:notdevfile_class_set create_file_perms; allow system_server packages_list_file:file create_file_perms; +allow system_server game_mode_intervention_list_file:file create_file_perms; allow system_server keychain_data_file:dir create_dir_perms; allow system_server keychain_data_file:file create_file_perms; allow system_server keychain_data_file:lnk_file create_file_perms; diff --git a/public/file.te b/public/file.te index 3c8fcc795..55f65b659 100644 --- a/public/file.te +++ b/public/file.te @@ -301,6 +301,7 @@ type system_data_file, file_type, data_file_type, core_data_file_type; # TODO(b/129332765): Narrow down permissions to this. # Find out users of system_data_file that should be granted only this. type packages_list_file, file_type, data_file_type, core_data_file_type; +type game_mode_intervention_list_file, file_type, data_file_type, core_data_file_type; # Default type for anything under /data/vendor{_ce,_de}. type vendor_data_file, file_type, data_file_type; # Unencrypted data