tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Permissions for input_native_boot flags

Browse source 
For input experiments that are enabled at boot time, allow system_server
to read and write the device config flags.

Bug: 120794829
Test: presubmit
Change-Id: I0f075a7579c593d4e07c3e31be529e34554068a6
This commit is contained in:
Siarhei Vishniakou 2019-01-14 14:18:38 -08:00
parent 1b02031d18
commit c0c9155589
6 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/28.0/28.0.ignore.cil
View file

@ -26,6 +26,7 @@
cpu_variant_prop
dev_cpu_variant
device_config_boot_count_prop
device_config_input_native_boot_prop
device_config_netd_native_prop
device_config_reset_performed_prop
device_config_service

1
private/property_contexts
View file

@ -169,6 +169,7 @@ persist.time. u:object_r:time_prop:s0
# Properties that relate to server configurable flags
device_config.reset_performed u:object_r:device_config_reset_performed_prop:s0
persist.device_config.attempted_boot_count u:object_r:device_config_boot_count_prop:s0
persist.device_config.input_native_boot. u:object_r:device_config_input_native_boot_prop:s0
persist.device_config.netd_native. u:object_r:device_config_netd_native_prop:s0
apexd. u:object_r:apexd_prop:s0

2
private/system_server.te
View file

@ -582,6 +582,7 @@ set_prop(system_server, ctl_bugreport_prop)
set_prop(system_server, cppreopt_prop)
# server configurable flags properties
set_prop(system_server, device_config_input_native_boot_prop)
set_prop(system_server, device_config_netd_native_prop)
# BootReceiver to read ro.boot.bootreason
@ -935,6 +936,7 @@ neverallow {
-system_server
-flags_health_check
} {
device_config_input_native_boot_prop
device_config_netd_native_prop
}:property_service set;

2
public/flags_heatlh_check.te
View file

@ -4,7 +4,7 @@ type flags_health_check_exec, system_file_type, exec_type, file_type;
set_prop(flags_health_check, device_config_boot_count_prop)
set_prop(flags_health_check, device_config_reset_performed_prop)
set_prop(flags_health_check, device_config_input_native_boot_prop)
set_prop(flags_health_check, device_config_netd_native_prop)
allow flags_health_check server_configurable_flags_data_file:dir rw_dir_perms;

2
public/property.te
View file

@ -30,6 +30,7 @@ type debug_prop, property_type, core_property_type;
type default_prop, property_type, core_property_type;
type device_config_boot_count_prop, property_type;
type device_config_reset_performed_prop, property_type;
type device_config_input_native_boot_prop, property_type;
type device_config_netd_native_prop, property_type;
type device_logging_prop, property_type;
type dhcp_prop, property_type, core_property_type;
@ -400,6 +401,7 @@ compatible_property_only(`
-firstboot_prop
-device_config_reset_performed_prop
-device_config_boot_count_prop
-device_config_input_native_boot_prop
-device_config_netd_native_prop
-heapprofd_enabled_prop
-heapprofd_prop

1
public/vendor_init.te
View file

@ -176,6 +176,7 @@ not_compatible_property(`
property_type
-device_config_boot_count_prop
-device_config_reset_performed_prop
-device_config_input_native_boot_prop
-device_config_netd_native_prop
-restorecon_prop
-netd_stable_secret_prop