tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add selinux permissions for ro.usb.uvc.enabled

Browse source 
This CL the selinux rules for the property ro.usb.uvc.enabled which will
be used to toggle UVC Gadget functionality on the Android Device.

Bug: 242344221
Bug: 242344229
Test: Manually tested that the property can only be read at runtime,
      not written to.
Change-Id: I0fd6051666d9554037acc68fa81226503f514a45
This commit is contained in:
Avichal Rakesh 2023-01-23 23:46:42 -08:00
parent beee8849a6
commit a12d3103be
6 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/33.0/33.0.ignore.cil
View file

@ -43,6 +43,7 @@
timezone_metadata_prop
tuner_config_prop
tuner_server_ctl_prop
usb_uvc_enabled_prop
virtual_face_hal_prop
virtual_fingerprint_hal_prop
hal_gatekeeper_service

6
private/property.te
View file

@ -681,3 +681,9 @@ neverallow {
domain
-init
} log_file_logger_prop:property_service set;
neverallow {
domain
-init
-vendor_init
} usb_uvc_enabled_prop:property_service set;

3
private/property_contexts
View file

@ -1501,3 +1501,6 @@ tuner.server.enable u:object_r:tuner_server_ctl_prop:s0 exact bool
# Adaptive haptics settings property
vibrator.adaptive_haptics.enabled u:object_r:adaptive_haptics_prop:s0 exact string
# UVC Gadget property
ro.usb.uvc.enabled u:object_r:usb_uvc_enabled_prop:s0 exact bool

3
private/system_app.te
View file

@ -177,6 +177,9 @@ allow system_app system_server:udp_socket {
# Settings app reads ro.oem_unlock_supported
get_prop(system_app, oem_unlock_prop)
# Settings app reads ro.usb.uvc.enabled
get_prop(system_app, usb_uvc_enabled_prop)
# Allow system apps to act as Perfetto producers.
perfetto_producer(system_app)

3
public/hal_usb_gadget.te
View file

@ -14,3 +14,6 @@ allow hal_usb_gadget_server configfs:file create_file_perms;
allow hal_usb_gadget_server functionfs:dir { read search };
allow hal_usb_gadget_server functionfs:file read;
allow hal_usb_gadget_server proc_interrupts:file r_file_perms;
# Read access to ro.usb.uvc.enabled
get_prop(hal_usb_gadget_server, usb_uvc_enabled_prop)

1
public/property.te
View file

@ -187,6 +187,7 @@ system_vendor_config_prop(zram_config_prop)
system_vendor_config_prop(zygote_config_prop)
system_vendor_config_prop(dck_prop)
system_vendor_config_prop(tuner_config_prop)
system_vendor_config_prop(usb_uvc_enabled_prop)
# Properties with no restrictions
system_public_prop(adbd_config_prop)