From d3bd68607ed6324e3d5257424ebae76f6d7e3c6d Mon Sep 17 00:00:00 2001
From: Seth Moore <sethmo@google.com>
Date: Fri, 24 Feb 2023 11:50:51 -0800
Subject: [PATCH] Allow shell to change RKP properties

This way, we can change things like the RKP hostname or enablement
from the shell for tests.

Bug: 265196434
Test: manual (adb shell setprop ...)
Change-Id: Ib853eaf29b395705eba57d241df064152220457e
---
 private/property.te | 1 +
 private/shell.te    | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/private/property.te b/private/property.te
index 4f806d437..4fd9bc32b 100644
--- a/private/property.te
+++ b/private/property.te
@@ -632,6 +632,7 @@ neverallow {
   domain
   -init
   -remote_prov_app
+  -shell
 } remote_prov_prop:property_service set;
 
 neverallow {
diff --git a/private/shell.te b/private/shell.te
index 02105a9ce..cdbf7c2d9 100644
--- a/private/shell.te
+++ b/private/shell.te
@@ -101,6 +101,9 @@ set_prop(shell, power_debug_prop)
 # Allow shell to set this property used for rollback tests
 set_prop(shell, rollback_test_prop)
 
+# Allow shell to set RKP properties for testing purposes
+set_prop(shell, remote_prov_prop)
+
 # Allow shell to get encryption policy of /data/local/tmp/, for CTS
 allowxperm shell shell_data_file:dir ioctl {
   FS_IOC_GET_ENCRYPTION_POLICY