diff --git a/private/flags_health_check.te b/private/flags_health_check.te index b30ee6ce5..de5f37e53 100644 --- a/private/flags_health_check.te +++ b/private/flags_health_check.te @@ -11,6 +11,8 @@ set_prop(flags_health_check, device_config_netd_native_prop) set_prop(flags_health_check, device_config_activity_manager_native_boot_prop) set_prop(flags_health_check, device_config_media_native_prop) set_prop(flags_health_check, device_config_profcollect_native_boot_prop) +set_prop(flags_health_check, device_config_statsd_native_prop) +set_prop(flags_health_check, device_config_statsd_native_boot_prop) set_prop(flags_health_check, device_config_storage_native_boot_prop) set_prop(flags_health_check, device_config_sys_traced_prop) set_prop(flags_health_check, device_config_window_manager_native_boot_prop) diff --git a/private/property.te b/private/property.te index 9a600cfc6..472f5cb92 100644 --- a/private/property.te +++ b/private/property.te @@ -1,6 +1,8 @@ # Properties used only in /system system_internal_prop(adbd_prop) system_internal_prop(device_config_profcollect_native_boot_prop) +system_internal_prop(device_config_statsd_native_prop) +system_internal_prop(device_config_statsd_native_boot_prop) system_internal_prop(device_config_storage_native_boot_prop) system_internal_prop(device_config_sys_traced_prop) system_internal_prop(device_config_window_manager_native_boot_prop) diff --git a/private/property_contexts b/private/property_contexts index 576887b85..ee0b31fdb 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -224,6 +224,8 @@ persist.device_config.netd_native. u:object_r:device_config_net persist.device_config.profcollect_native_boot. u:object_r:device_config_profcollect_native_boot_prop:s0 persist.device_config.runtime_native. u:object_r:device_config_runtime_native_prop:s0 persist.device_config.runtime_native_boot. u:object_r:device_config_runtime_native_boot_prop:s0 +persist.device_config.statsd_native. u:object_r:device_config_statsd_native_prop:s0 +persist.device_config.statsd_native_boot. u:object_r:device_config_statsd_native_boot_prop:s0 persist.device_config.storage_native_boot. u:object_r:device_config_storage_native_boot_prop:s0 persist.device_config.window_manager_native_boot. u:object_r:device_config_window_manager_native_boot_prop:s0 diff --git a/private/statsd.te b/private/statsd.te index 148315604..444d82e3c 100644 --- a/private/statsd.te +++ b/private/statsd.te @@ -21,3 +21,7 @@ allow statsd system_server:fifo_file { read getattr }; # Allow statsd to retrieve SF statistics over binder binder_call(statsd, surfaceflinger); + +# Allow statsd to read its system properties +get_prop(statsd, device_config_statsd_native_prop) +get_prop(statsd, device_config_statsd_native_boot_prop) diff --git a/private/system_server.te b/private/system_server.te index a60c32736..78abdffcd 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -627,6 +627,8 @@ set_prop(system_server, device_config_runtime_native_boot_prop) set_prop(system_server, device_config_runtime_native_prop) set_prop(system_server, device_config_media_native_prop) set_prop(system_server, device_config_profcollect_native_boot_prop) +set_prop(system_server, device_config_statsd_native_prop) +set_prop(system_server, device_config_statsd_native_boot_prop) set_prop(system_server, device_config_storage_native_boot_prop) set_prop(system_server, device_config_sys_traced_prop) set_prop(system_server, device_config_window_manager_native_boot_prop)