tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Add SELinux config for new SensorFusion property" into main am: 1d68b1b2da am: 9e71d05a76 am: 41d8a94daa am: aa1b131d6a

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2667563

Change-Id: I4a3e49e62f74cef2d1f319c7cb051f6341048ac9
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Pontus Lidman 2023-07-21 23:45:19 +00:00 committed by Automerger Merge Worker
commit f59710f6de
3 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/property.te
View file

@ -52,6 +52,8 @@ system_internal_prop(ctl_odsign_prop)
system_internal_prop(virtualizationservice_prop)
system_internal_prop(ctl_apex_load_prop)
system_internal_prop(sensors_config_prop)
# Properties which can't be written outside system
system_restricted_prop(device_config_virtualization_framework_native_prop)
system_restricted_prop(log_file_logger_prop)

3
private/property_contexts
View file

@ -1569,3 +1569,6 @@ persist.sysui.notification.builder_extras_override u:object_r:persist_sysui_buil
# Properties for Quick Start setup.
ro.quick_start.oem_id u:object_r:quick_start_prop:s0 exact string
ro.quick_start.device_id u:object_r:quick_start_prop:s0 exact string
# Properties for sensor service
sensors.aosp_low_power_sensor_fusion.maximum_rate u:object_r:sensors_config_prop:s0 exact uint

4
private/system_server.te
View file

@ -855,6 +855,10 @@ set_prop(system_server, tuner_server_ctl_prop)
# Allow the heap dump ART plugin to the count of sessions waiting for OOME
get_prop(system_server, traced_oome_heap_session_count_prop)
# Allow the sensor service (running in the system service) to read sensor
# configuration properties
get_prop(system_server, sensors_config_prop)
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;