Merge "Add sepolicy for /metadata/watchdog"

This commit is contained in:
Gavin Corkery 2021-01-08 08:20:45 +00:00 committed by Gerrit Code Review
commit b46e956d97
4 changed files with 7 additions and 0 deletions

View file

@ -65,4 +65,5 @@
userspace_reboot_metadata_file
vcn_management_service
vibrator_manager_service
watchdog_metadata_file
zygote_config_prop))

View file

@ -754,6 +754,7 @@
/metadata/bootstat(/.*)? u:object_r:metadata_bootstat_file:s0
/metadata/staged-install(/.*)? u:object_r:staged_install_file:s0
/metadata/userspacereboot(/.*)? u:object_r:userspace_reboot_metadata_file:s0
/metadata/watchdog(/.*)? u:object_r:watchdog_metadata_file:s0
#############################
# asec containers

View file

@ -1174,6 +1174,9 @@ allow system_server userspace_reboot_metadata_file:file create_file_perms;
allow system_server staged_install_file:dir rw_dir_perms;
allow system_server staged_install_file:file create_file_perms;
allow system_server watchdog_metadata_file:dir rw_dir_perms;
allow system_server watchdog_metadata_file:file create_file_perms;
# Allow init to set sysprop used to compute stats about userspace reboot.
set_prop(system_server, userspace_reboot_log_prop)

View file

@ -245,6 +245,8 @@ type metadata_bootstat_file, file_type;
type userspace_reboot_metadata_file, file_type;
# Staged install files within /metadata/staged-install
type staged_install_file, file_type;
# Metadata information within /metadata/watchdog
type watchdog_metadata_file, file_type;
# Type for /dev/cpu_variant:.*.
type dev_cpu_variant, file_type;