Label persist audio properties

label all persist.audio.* properties
and allow mediaserver access to them.

Change-Id: If5755d9783dce298e66a25bcb7f17ff17bd83ea7
This commit is contained in:
William Roberts 2012-11-27 17:34:54 -08:00
parent 61c80d5ec8
commit e2ad318e45
3 changed files with 4 additions and 0 deletions

View file

@ -3,6 +3,7 @@ type mediaserver, domain;
type mediaserver_exec, exec_type, file_type;
init_daemon_domain(mediaserver)
unix_socket_connect(mediaserver, property, init)
net_domain(mediaserver)
typeattribute mediaserver mlstrustedsubject;
allow mediaserver kernel:system module_request;
@ -43,3 +44,4 @@ allow mediaserver qtaguid_device:chr_file r_file_perms;
allow mediaserver rild:unix_stream_socket connectto;
allow mediaserver tee_device:chr_file rw_file_perms;
allow mediaserver audio_prop:property_service set;

View file

@ -7,3 +7,4 @@ type rild_prop, property_type;
type ctl_default_prop, property_type;
type ctl_dumpstate_prop, property_type;
type ctl_rildaemon_prop, property_type;
type audio_prop, property_type;

View file

@ -29,6 +29,7 @@ log. u:object_r:shell_prop:s0
service.adb.root u:object_r:shell_prop:s0
service.adb.tcp.port u:object_r:shell_prop:s0
persist.audio. u:object_r:audio_prop:s0
persist.sys. u:object_r:system_prop:s0
persist.service. u:object_r:system_prop:s0
persist.security. u:object_r:system_prop:s0