tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Let shell and bugreport read logging related properties.

Browse source 
Currently ro.device_owner and persist.logd.security aren't accessible
without root, so "adb shell getprop" returns empty reply which is
confusing. Also these properties aren't seen from bugreport unless
their change happened recently.

Bug: 37053313
Test: manual, took bugreport and ran getprop after "adb unroot".
Change-Id: Id41cdabc282f2ebcdfc0ac7fe9df756322a0863d
This commit is contained in:
Pavel Grafov 2017-04-20 18:02:50 +01:00
parent 910e60c742
commit a283ac713c
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
public/dumpstate.te
View file

@ -185,6 +185,9 @@ set_prop(dumpstate, dumpstate_options_prop)
# Read device's serial number from system properties # Read device's serial number from system properties
get_prop(dumpstate, serialno_prop) get_prop(dumpstate, serialno_prop)
# Read state of logging-related properties
get_prop(dumpstate, device_logging_prop)
# Access to /data/media. # Access to /data/media.
# This should be removed if sdcardfs is modified to alter the secontext for its # This should be removed if sdcardfs is modified to alter the secontext for its
# accesses to the underlying FS. # accesses to the underlying FS.

3
public/shell.te
View file

@ -75,6 +75,9 @@ userdebug_or_eng(`
# Read device's serial number from system properties # Read device's serial number from system properties
get_prop(shell, serialno_prop) get_prop(shell, serialno_prop)
# Read state of logging-related properties
get_prop(shell, device_logging_prop)
# allow shell access to services # allow shell access to services
allow shell servicemanager:service_manager list; allow shell servicemanager:service_manager list;
# don't allow shell to access GateKeeper service # don't allow shell to access GateKeeper service