55e5c9b513
public/property split is landed to selectively export public types to
vendors. So rules happening within system should be in private. This
introduces private/property.te and moves all allow and neverallow rules
from any coredomains to system defiend properties.
Bug: 150331497
Test: system/sepolicy/tools/build_policies.sh
Change-Id: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
Merged-In: I0d929024ae9f4ae3830d4bf3d59e999febb22cbe
(cherry picked from commit 42c7d8966c)
9 lines
381 B
Text
9 lines
381 B
Text
typeattribute mediaextractor coredomain;
|
|
|
|
init_daemon_domain(mediaextractor)
|
|
tmpfs_domain(mediaextractor)
|
|
allow mediaextractor appdomain_tmpfs:file { getattr map read write };
|
|
allow mediaextractor mediaserver_tmpfs:file { getattr map read write };
|
|
allow mediaextractor system_server_tmpfs:file { getattr map read write };
|
|
|
|
get_prop(mediaextractor, device_config_media_native_prop)
|