tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Prevent non-system apps from read ro.usb.uvc.enabled" am: 36c4d512be

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2415830

Change-Id: Ie3acb6f962e05a3f9ddc6036590e3ec67ed650d3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Avichal Rakesh 2023-02-03 20:31:11 +00:00 committed by Automerger Merge Worker
commit b95f1e539a
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
private/property.te
View file

@ -687,3 +687,10 @@ neverallow {
-init -init
-vendor_init -vendor_init
} usb_uvc_enabled_prop:property_service set; } usb_uvc_enabled_prop:property_service set;
# Disallow non system apps from reading ro.usb.uvc.enabled
neverallow {
appdomain
-system_app
-device_as_webcam
} usb_uvc_enabled_prop:file no_rw_file_perms;