Merge "Allow odrefresh to access dalvik system properties"

This commit is contained in:
Treehugger Robot 2022-05-17 08:47:01 +00:00 committed by Gerrit Code Review
commit 9ec40d4b20

View file

@ -35,7 +35,10 @@ allow odrefresh compos:fifo_file read;
# fail immediately. See b/210909688.
allow odrefresh compos:fd use;
# Silently ignore the access to properties. Unlike on Android, parameters
# should be passed from command line to avoid global state.
# Allow odrefresh to read all dalvik system properties. odrefresh needs to record the relevant ones
# in the output for later verification check.
get_prop(odrefresh, dalvik_config_prop)
get_prop(odrefresh, device_config_runtime_native_boot_prop)
# Silently ignore the write to properties, e.g. for setting boot animation progress.
dontaudit odrefresh property_socket:sock_file write;
dontaudit odrefresh dalvik_config_prop:file read;