Allow media server configurable flags to be read from anywhere am: ffeb680417
am: 7975447205
am: 9d16f70010
am: 35ea33c233
am: 94e54d5eb0
am: 6e6229bb73
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2605806
Bug: 234833109
Test: manual test with 'adb shell device_config' commands
Ignore-AOSP-First: cherry pick from AOSP
Change-Id: I4d9de68549de6f1664711c5da1bed3dfc034a21b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
(cherry picked from commit 1d2f8fa03f
)
This commit is contained in:
parent
7b646790c5
commit
da80fcc173
2 changed files with 5 additions and 1 deletions
|
@ -1285,3 +1285,7 @@ neverallow { domain -traced_probes -init -vendor_init } debugfs_tracing_printk_f
|
|||
|
||||
# Linux lockdown "integrity" level is enforced for user builds.
|
||||
neverallow { domain userdebug_or_eng(`-domain') } self:lockdown integrity;
|
||||
|
||||
# Allow everyone to read media server-configurable flags, so that libstagefright can be
|
||||
# configured using server-configurable flags
|
||||
get_prop(domain, device_config_media_native_prop)
|
||||
|
|
|
@ -8,7 +8,6 @@ system_internal_prop(bootloader_boot_reason_prop)
|
|||
system_internal_prop(device_config_activity_manager_native_boot_prop)
|
||||
system_internal_prop(device_config_boot_count_prop)
|
||||
system_internal_prop(device_config_input_native_boot_prop)
|
||||
system_internal_prop(device_config_media_native_prop)
|
||||
system_internal_prop(device_config_netd_native_prop)
|
||||
system_internal_prop(device_config_reset_performed_prop)
|
||||
system_internal_prop(firstboot_prop)
|
||||
|
@ -68,6 +67,7 @@ system_restricted_prop(build_prop)
|
|||
system_restricted_prop(composd_vm_art_prop)
|
||||
system_restricted_prop(device_config_camera_native_prop)
|
||||
system_restricted_prop(device_config_edgetpu_native_prop)
|
||||
system_restricted_prop(device_config_media_native_prop)
|
||||
system_restricted_prop(device_config_nnapi_native_prop)
|
||||
system_restricted_prop(device_config_runtime_native_boot_prop)
|
||||
system_restricted_prop(device_config_runtime_native_prop)
|
||||
|
|
Loading…
Reference in a new issue