tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
13244 commits 1 branch 0 tags 50 MiB
Commit graph

4 commits

Author SHA1 Message Date
Steven Moreland
623d9f0683 Clarify sysfs_leds neverallow. 
Now that init no longer uses it.

Fixes: 70846424
Test: no neverallows tripped
Change-Id: I5c22dd272b66fd32b4758c1dce659ccd98b8a7ba
 2018-01-22 22:03:51 +00:00
Steven Moreland
09fddac1d7 Disallow sysfs_leds to coredomains. 
Bug: 70846424
Test: neverallow not tripped
Change-Id: I9e351ee906162a594930b5ab300facb5fe807f13
 2018-01-18 18:10:06 -08:00
Jaekyun Seok
e49714542e Whitelist exported platform properties 
This CL lists all the exported platform properties in
private/exported_property_contexts.

Additionally accessing core_property_type from vendor components is
restricted.
Instead public_readable_property_type is used to allow vendor components
to read exported platform properties, and accessibility from
vendor_init is also specified explicitly.

Note that whitelisting would be applied only if
PRODUCT_COMPATIBLE_PROPERTY is set on.

Bug: 38146102
Test: tested on walleye with PRODUCT_COMPATIBLE_PROPERTY=true
Change-Id: I304ba428cc4ca82668fec2ddeb17c971e7ec065e
 2018-01-10 16:15:25 +00:00
Jeff Vander Stoep
0f5ad4e593 Allow AOSP processes to read pm_prop 
Exclude vendor processes.

Bug: 69309298
Test: cts-tradefed run cts -m CtsCompilationTestCases
    completed in 33s. 5 passed, 0 failed
Test: runtest frameworks-services -c \
    com.android.server.pm.dex.DexoptOptionsTests \
    --install=".*FrameworksServicesTests.apk"
    OK (5 tests)

Change-Id: Ic02caf373e2214b4b931a724ca8d4f4effbc0741
 2017-11-17 13:08:45 -08:00