Label persist audio properties
label all persist.audio.* properties and allow mediaserver access to them. Change-Id: If5755d9783dce298e66a25bcb7f17ff17bd83ea7
This commit is contained in:
parent
61c80d5ec8
commit
e2ad318e45
3 changed files with 4 additions and 0 deletions
|
@ -3,6 +3,7 @@ type mediaserver, domain;
|
|||
type mediaserver_exec, exec_type, file_type;
|
||||
|
||||
init_daemon_domain(mediaserver)
|
||||
unix_socket_connect(mediaserver, property, init)
|
||||
net_domain(mediaserver)
|
||||
typeattribute mediaserver mlstrustedsubject;
|
||||
allow mediaserver kernel:system module_request;
|
||||
|
@ -43,3 +44,4 @@ allow mediaserver qtaguid_device:chr_file r_file_perms;
|
|||
allow mediaserver rild:unix_stream_socket connectto;
|
||||
|
||||
allow mediaserver tee_device:chr_file rw_file_perms;
|
||||
allow mediaserver audio_prop:property_service set;
|
||||
|
|
|
@ -7,3 +7,4 @@ type rild_prop, property_type;
|
|||
type ctl_default_prop, property_type;
|
||||
type ctl_dumpstate_prop, property_type;
|
||||
type ctl_rildaemon_prop, property_type;
|
||||
type audio_prop, property_type;
|
||||
|
|
|
@ -29,6 +29,7 @@ log. u:object_r:shell_prop:s0
|
|||
service.adb.root u:object_r:shell_prop:s0
|
||||
service.adb.tcp.port u:object_r:shell_prop:s0
|
||||
|
||||
persist.audio. u:object_r:audio_prop:s0
|
||||
persist.sys. u:object_r:system_prop:s0
|
||||
persist.service. u:object_r:system_prop:s0
|
||||
persist.security. u:object_r:system_prop:s0
|
||||
|
|
Loading…
Reference in a new issue