Merge changes from topic "ramdisk_timestamp_runtime_load" am: b178fe826c
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1451819 Change-Id: I0507c9b561bbe5cb42e80fe9745955186c87baa7
This commit is contained in:
commit
da436db2a0
6 changed files with 14 additions and 0 deletions
|
@ -33,6 +33,7 @@
|
|||
bluetooth_a2dp_offload_prop
|
||||
bpfloader
|
||||
bpfloader_exec
|
||||
build_bootimage_prop
|
||||
build_odm_prop
|
||||
build_prop
|
||||
build_vendor_prop
|
||||
|
|
|
@ -1403,6 +1403,7 @@
|
|||
(typeattributeset exported_default_prop_30_0
|
||||
( exported_default_prop
|
||||
aaudio_config_prop
|
||||
build_bootimage_prop
|
||||
build_odm_prop
|
||||
build_vendor_prop
|
||||
surfaceflinger_prop
|
||||
|
|
|
@ -663,6 +663,13 @@ ro.vendor.build.fingerprint u:object_r:build_vendor_prop:s0 exact string
|
|||
ro.vendor.build.version.incremental u:object_r:build_vendor_prop:s0 exact string
|
||||
ro.vendor.build.version.sdk u:object_r:build_vendor_prop:s0 exact int
|
||||
|
||||
# Boot image build props set by /{second_stage_resources/,}boot/etc/build.prop
|
||||
ro.bootimage.build.date u:object_r:build_bootimage_prop:s0 exact string
|
||||
ro.bootimage.build.date.utc u:object_r:build_bootimage_prop:s0 exact int
|
||||
ro.bootimage.build.fingerprint u:object_r:build_bootimage_prop:s0 exact string
|
||||
ro.bootimage.build.version.incremental u:object_r:build_bootimage_prop:s0 exact string
|
||||
ro.bootimage.build.version.sdk u:object_r:build_bootimage_prop:s0 exact int
|
||||
|
||||
ro.product.board u:object_r:build_vendor_prop:s0 exact string
|
||||
ro.product.first_api_level u:object_r:build_vendor_prop:s0 exact int
|
||||
ro.product.vendor.brand u:object_r:build_vendor_prop:s0 exact string
|
||||
|
|
|
@ -145,6 +145,9 @@ get_prop(shell, system_boot_reason_prop)
|
|||
# Allow reading the outcome of perf_event_open LSM support test for CTS.
|
||||
get_prop(shell, init_perf_lsm_hooks_prop)
|
||||
|
||||
# Allow shell to read boot image timestamps and fingerprints.
|
||||
get_prop(shell, build_bootimage_prop)
|
||||
|
||||
userdebug_or_eng(`set_prop(shell, persist_debug_prop)')
|
||||
|
||||
# Allow to issue control commands to profcollectd binder service.
|
||||
|
|
|
@ -62,6 +62,7 @@ system_restricted_prop(boot_status_prop)
|
|||
system_restricted_prop(bootloader_prop)
|
||||
system_restricted_prop(boottime_public_prop)
|
||||
system_restricted_prop(bq_config_prop)
|
||||
system_restricted_prop(build_bootimage_prop)
|
||||
system_restricted_prop(build_prop)
|
||||
system_restricted_prop(charger_status_prop)
|
||||
system_restricted_prop(fingerprint_prop)
|
||||
|
|
|
@ -82,6 +82,7 @@ get_prop(update_engine_common, virtual_ab_prop)
|
|||
|
||||
# Allow to read GKI related flags.
|
||||
get_prop(update_engine_common, ab_update_gki_prop)
|
||||
get_prop(update_engine_common, build_bootimage_prop)
|
||||
|
||||
# Allow to read/write/create OTA metadata files for snapshot status and COW file status.
|
||||
allow update_engine_common metadata_file:dir search;
|
||||
|
|
Loading…
Reference in a new issue