tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add sepolicy swcodec native flag namespace.

Browse source 
Test: add sepolicy, build, check GetServerConfigurableFlag function
Bug: 179286276
Change-Id: Ia16d110900251b3fb3e3959d73524c8814199270
This commit is contained in:
Nick Chalko 2021-02-11 09:12:51 -08:00
parent e8d2732651
commit 81a4dd40d6
7 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/30.0/30.0.ignore.cil
View file

@ -22,6 +22,7 @@
debugfs_mm_events_tracing debugfs_mm_events_tracing
device_config_profcollect_native_boot_prop device_config_profcollect_native_boot_prop
device_config_connectivity_prop device_config_connectivity_prop
device_config_swcodec_native_prop
device_state_service device_state_service
dm_user_device dm_user_device
dmabuf_heap_device dmabuf_heap_device

1
private/flags_health_check.te
View file

@ -14,6 +14,7 @@ set_prop(flags_health_check, device_config_profcollect_native_boot_prop)
set_prop(flags_health_check, device_config_statsd_native_prop) set_prop(flags_health_check, device_config_statsd_native_prop)
set_prop(flags_health_check, device_config_statsd_native_boot_prop) set_prop(flags_health_check, device_config_statsd_native_boot_prop)
set_prop(flags_health_check, device_config_storage_native_boot_prop) set_prop(flags_health_check, device_config_storage_native_boot_prop)
set_prop(flags_health_check, device_config_swcodec_native_prop)
set_prop(flags_health_check, device_config_sys_traced_prop) set_prop(flags_health_check, device_config_sys_traced_prop)
set_prop(flags_health_check, device_config_window_manager_native_boot_prop) set_prop(flags_health_check, device_config_window_manager_native_boot_prop)
set_prop(flags_health_check, device_config_configuration_prop) set_prop(flags_health_check, device_config_configuration_prop)

1
private/mediaextractor.te
View file

@ -7,3 +7,4 @@ allow mediaextractor mediaserver_tmpfs:file { getattr map read write };
allow mediaextractor system_server_tmpfs:file { getattr map read write }; allow mediaextractor system_server_tmpfs:file { getattr map read write };
get_prop(mediaextractor, device_config_media_native_prop) get_prop(mediaextractor, device_config_media_native_prop)
get_prop(mediaextractor, device_config_swcodec_native_prop)

1
private/mediaswcodec.te
View file

@ -3,3 +3,4 @@ typeattribute mediaswcodec coredomain;
init_daemon_domain(mediaswcodec) init_daemon_domain(mediaswcodec)
get_prop(mediaswcodec, device_config_media_native_prop) get_prop(mediaswcodec, device_config_media_native_prop)
get_prop(mediaswcodec, device_config_swcodec_native_prop)

1
private/property.te
View file

@ -9,6 +9,7 @@ system_internal_prop(device_config_sys_traced_prop)
system_internal_prop(device_config_window_manager_native_boot_prop) system_internal_prop(device_config_window_manager_native_boot_prop)
system_internal_prop(device_config_configuration_prop) system_internal_prop(device_config_configuration_prop)
system_internal_prop(device_config_connectivity_prop) system_internal_prop(device_config_connectivity_prop)
system_internal_prop(device_config_swcodec_native_prop)
system_internal_prop(fastbootd_protocol_prop) system_internal_prop(fastbootd_protocol_prop)
system_internal_prop(gsid_prop) system_internal_prop(gsid_prop)
system_internal_prop(init_perf_lsm_hooks_prop) system_internal_prop(init_perf_lsm_hooks_prop)

1
private/property_contexts
View file

@ -231,6 +231,7 @@ persist.device_config.runtime_native_boot. u:object_r:device_config_run
persist.device_config.statsd_native. u:object_r:device_config_statsd_native_prop:s0 persist.device_config.statsd_native. u:object_r:device_config_statsd_native_prop:s0
persist.device_config.statsd_native_boot. u:object_r:device_config_statsd_native_boot_prop:s0 persist.device_config.statsd_native_boot. u:object_r:device_config_statsd_native_boot_prop:s0
persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0 persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0
persist.device_config.swcodec_native. u:object_r:device_config_swcodec_native_prop:s0
persist.device_config.window_manager_native_boot. u:object_r:device_config_window_manager_native_boot_prop:s0 persist.device_config.window_manager_native_boot. u:object_r:device_config_window_manager_native_boot_prop:s0
# Properties that relate to legacy server configurable flags # Properties that relate to legacy server configurable flags

2
private/system_server.te
View file

@ -668,6 +668,7 @@ set_prop(system_server, device_config_profcollect_native_boot_prop)
set_prop(system_server, device_config_statsd_native_prop) set_prop(system_server, device_config_statsd_native_prop)
set_prop(system_server, device_config_statsd_native_boot_prop) set_prop(system_server, device_config_statsd_native_boot_prop)
set_prop(system_server, device_config_storage_native_boot_prop) set_prop(system_server, device_config_storage_native_boot_prop)
set_prop(system_server, device_config_swcodec_native_prop)
set_prop(system_server, device_config_sys_traced_prop) set_prop(system_server, device_config_sys_traced_prop)
set_prop(system_server, device_config_window_manager_native_boot_prop) set_prop(system_server, device_config_window_manager_native_boot_prop)
set_prop(system_server, device_config_configuration_prop) set_prop(system_server, device_config_configuration_prop)
@ -1138,6 +1139,7 @@ neverallow {
device_config_media_native_prop device_config_media_native_prop
device_config_storage_native_boot_prop device_config_storage_native_boot_prop
device_config_sys_traced_prop device_config_sys_traced_prop
device_config_swcodec_native_prop
device_config_window_manager_native_boot_prop device_config_window_manager_native_boot_prop
}:property_service set; }:property_service set;