42c7d8966c
public/property split is landed to selectively export public types to vendors. So rules happening within system should be in private. This introduces private/property.te and moves all allow and neverallow rules from any coredomains to system defiend properties. Bug: 150331497 Test: system/sepolicy/tools/build_policies.sh Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
9 lines
267 B
Text
9 lines
267 B
Text
typeattribute update_verifier coredomain;
|
|
|
|
init_daemon_domain(update_verifier)
|
|
|
|
# Allow update_verifier to reboot the device.
|
|
set_prop(update_verifier, powerctl_prop)
|
|
|
|
# Allow to set the OTA related properties e.g. ota.warm_reset.
|
|
set_prop(update_verifier, ota_prop)
|