platform_system_sepolicy/private/compat/29.0/29.0.ignore.cil
Nikita Ioffe 7065e46b5d Add selinux rules for userspace reboot related properties
By default sys.init.userspace_reboot.* properties are internal to
/system partition. Only exception is
sys.init.userspace_reboot.in_progress which signals to all native
services (including vendor ones) that userspace reboot is happening,
hence it should be a system_public_prop.

Only init should be allowed to set userspace reboot related properties.

Bug: 135984674
Test: builds
Test: adb reboot userspace
Change-Id: Ibb04965be2d5bf6e81b34569aaaa1014ff61e0d3
2019-11-19 17:41:28 +00:00

41 lines
1.2 KiB
Text

;; new_objects - a collection of types that have been introduced that have no
;; analogue in older policy. Thus, we do not need to map these types to
;; previous ones. Add here to pass checkapi tests.
(type new_objects)
(typeattribute new_objects)
(typeattributeset new_objects
( new_objects
ashmem_libcutils_device
blob_store_service
boringssl_self_test
charger_prop
cold_boot_done_prop
platform_compat_service
ctl_apexd_prop
device_config_storage_native_boot_prop
device_config_sys_traced_prop
hal_can_bus_hwservice
hal_can_controller_hwservice
hal_tv_tuner_hwservice
hal_vibrator_service
init_svc_debug_prop
iorap_prefetcherd
iorap_prefetcherd_data_file
iorap_prefetcherd_exec
iorap_prefetcherd_tmpfs
linker_prop
mock_ota_prop
ota_metadata_file
art_apex_dir
service_manager_service
system_group_file
system_passwd_file
timezonedetector_service
userspace_reboot_prop
userspace_reboot_exported_prop
vendor_apex_file
vendor_boringssl_self_test
vendor_install_recovery
vendor_install_recovery_exec
virtual_ab_prop
wifi_stack_service))