Merge changes from topic "ramdisk_timestamp_runtime_load" am: b178fe826c

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1451819

Change-Id: I0507c9b561bbe5cb42e80fe9745955186c87baa7
This commit is contained in:
Treehugger Robot 2020-10-16 22:16:45 +00:00 committed by Automerger Merge Worker
commit da436db2a0
6 changed files with 14 additions and 0 deletions

View file

@ -33,6 +33,7 @@
bluetooth_a2dp_offload_prop
bpfloader
bpfloader_exec
build_bootimage_prop
build_odm_prop
build_prop
build_vendor_prop

View file

@ -1403,6 +1403,7 @@
(typeattributeset exported_default_prop_30_0
( exported_default_prop
aaudio_config_prop
build_bootimage_prop
build_odm_prop
build_vendor_prop
surfaceflinger_prop

View file

@ -663,6 +663,13 @@ ro.vendor.build.fingerprint u:object_r:build_vendor_prop:s0 exact string
ro.vendor.build.version.incremental u:object_r:build_vendor_prop:s0 exact string
ro.vendor.build.version.sdk u:object_r:build_vendor_prop:s0 exact int
# Boot image build props set by /{second_stage_resources/,}boot/etc/build.prop
ro.bootimage.build.date u:object_r:build_bootimage_prop:s0 exact string
ro.bootimage.build.date.utc u:object_r:build_bootimage_prop:s0 exact int
ro.bootimage.build.fingerprint u:object_r:build_bootimage_prop:s0 exact string
ro.bootimage.build.version.incremental u:object_r:build_bootimage_prop:s0 exact string
ro.bootimage.build.version.sdk u:object_r:build_bootimage_prop:s0 exact int
ro.product.board u:object_r:build_vendor_prop:s0 exact string
ro.product.first_api_level u:object_r:build_vendor_prop:s0 exact int
ro.product.vendor.brand u:object_r:build_vendor_prop:s0 exact string

View file

@ -145,6 +145,9 @@ get_prop(shell, system_boot_reason_prop)
# Allow reading the outcome of perf_event_open LSM support test for CTS.
get_prop(shell, init_perf_lsm_hooks_prop)
# Allow shell to read boot image timestamps and fingerprints.
get_prop(shell, build_bootimage_prop)
userdebug_or_eng(`set_prop(shell, persist_debug_prop)')
# Allow to issue control commands to profcollectd binder service.

View file

@ -62,6 +62,7 @@ system_restricted_prop(boot_status_prop)
system_restricted_prop(bootloader_prop)
system_restricted_prop(boottime_public_prop)
system_restricted_prop(bq_config_prop)
system_restricted_prop(build_bootimage_prop)
system_restricted_prop(build_prop)
system_restricted_prop(charger_status_prop)
system_restricted_prop(fingerprint_prop)

View file

@ -82,6 +82,7 @@ get_prop(update_engine_common, virtual_ab_prop)
# Allow to read GKI related flags.
get_prop(update_engine_common, ab_update_gki_prop)
get_prop(update_engine_common, build_bootimage_prop)
# Allow to read/write/create OTA metadata files for snapshot status and COW file status.
allow update_engine_common metadata_file:dir search;