tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Making sys.boot.reason.last restricted" into android14-tests-dev

Browse source
This commit is contained in:
Treehugger Robot 2023-12-06 12:53:05 +00:00 committed by Gerrit Code Review
commit 8deb864534
4 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
prebuilts/api/34.0/private/bootstat.te
View file

@ -17,6 +17,7 @@ neverallow {
-dumpstate
userdebug_or_eng(`-incidentd')
-init
-platform_app
-recovery
-shell
-system_server

3
prebuilts/api/34.0/private/platform_app.te
View file

@ -113,6 +113,9 @@ get_prop(platform_app, keyguard_config_prop)
# allow platform apps to read qemu.hw.mainkeys
get_prop(platform_app, qemu_hw_prop)
# allow platform apps to read sys.boot.reason.last
get_prop(platform_app, last_boot_reason_prop)
# allow platform apps to create symbolic link
allow platform_app app_data_file:lnk_file create_file_perms;

1
private/bootstat.te
View file

@ -17,6 +17,7 @@ neverallow {
-dumpstate
userdebug_or_eng(`-incidentd')
-init
-platform_app
-recovery
-shell
-system_server

3
private/platform_app.te
View file

@ -113,6 +113,9 @@ get_prop(platform_app, keyguard_config_prop)
# allow platform apps to read qemu.hw.mainkeys
get_prop(platform_app, qemu_hw_prop)
# allow platform apps to read sys.boot.reason.last
get_prop(platform_app, last_boot_reason_prop)
# allow platform apps to create symbolic link
allow platform_app app_data_file:lnk_file create_file_perms;