tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Add SELinux config for new SensorFusion property" into main am: 1d68b1b2da

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2667563

Change-Id: I0d3ff020cdeb06b15ed196f8436c1a5aaa7d956e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Pontus Lidman 2023-07-21 21:33:07 +00:00 committed by Automerger Merge Worker
commit 9e71d05a76
3 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/property.te
View file

@ -51,6 +51,8 @@ system_internal_prop(ctl_odsign_prop)
system_internal_prop(virtualizationservice_prop)
system_internal_prop(ctl_apex_load_prop)
system_internal_prop(sensors_config_prop)
# Properties which can't be written outside system
system_restricted_prop(device_config_virtualization_framework_native_prop)
system_restricted_prop(log_file_logger_prop)

3
private/property_contexts
View file

@ -1567,3 +1567,6 @@ persist.sysui.notification.builder_extras_override u:object_r:persist_sysui_buil
# Properties for Quick Start setup.
ro.quick_start.oem_id u:object_r:quick_start_prop:s0 exact string
ro.quick_start.device_id u:object_r:quick_start_prop:s0 exact string
# Properties for sensor service
sensors.aosp_low_power_sensor_fusion.maximum_rate u:object_r:sensors_config_prop:s0 exact uint

4
private/system_server.te
View file

@ -854,6 +854,10 @@ set_prop(system_server, tuner_server_ctl_prop)
# Allow the heap dump ART plugin to the count of sessions waiting for OOME
get_prop(system_server, traced_oome_heap_session_count_prop)
# Allow the sensor service (running in the system service) to read sensor
# configuration properties
get_prop(system_server, sensors_config_prop)
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;