platform_system_sepolicy/private/compat/29.0/29.0.ignore.cil
Kenny Root 960f73b75b rebootescrow: allow use of block file
pmem uses a block file while access_ramoops uses a char file. Allow both for
now until we can unify on pmem.

Additionally allow the reading of vendor properties so it can read the
path to the character or block device to open.

Test: atest VtsHalRebootEscrowTargetTest
Bug: 146400078
Change-Id: Ief61534e0946480a01c635ce1672579959ec8db5
2020-01-27 12:28:44 -08:00

93 lines
2.4 KiB
Text

;; new_objects - a collection of types that have been introduced that have no
;; analogue in older policy. Thus, we do not need to map these types to
;; previous ones. Add here to pass checkapi tests.
(type new_objects)
(typeattribute new_objects)
(typeattributeset new_objects
( new_objects
aidl_lazy_test_server
aidl_lazy_test_server_exec
aidl_lazy_test_service
apex_module_data_file
apex_permission_data_file
apex_rollback_data_file
app_integrity_service
app_search_service
auth_service
automotive_display
automotive_display_exec
ashmem_libcutils_device
blob_store_service
binder_cache_bluetooth_server_prop
binder_cache_system_server_prop
binderfs
binderfs_logs
binderfs_logs_proc
boringssl_self_test
charger_prop
cold_boot_done_prop
platform_compat_service
ctl_apexd_prop
dataloader_manager_service
device_config_storage_native_boot_prop
device_config_sys_traced_prop
device_config_window_manager_native_boot_prop
exported_camera_prop
file_integrity_service
fwk_automotive_display_hwservice
gmscore_app
hal_can_bus_hwservice
hal_can_controller_hwservice
hal_identity_hwservice
hal_light_service
hal_power_service
hal_rebootescrow_service
hal_tv_tuner_hwservice
hal_vibrator_service
incfs
incremental_service
incremental_root_file
init_perf_lsm_hooks_prop
init_svc_debug_prop
iorap_prefetcherd
iorap_prefetcherd_data_file
iorap_prefetcherd_exec
iorap_prefetcherd_tmpfs
mediatranscoding_service
mediatranscoding
mediatranscoding_exec
mediatranscoding_tmpfs
mirror_data_file
light_service
linker_prop
linkerconfig_file
mock_ota_prop
module_sdkextensions_prop
ota_metadata_file
ota_prop
art_apex_dir
rebootescrow_hal_prop
service_manager_service
simpleperf
soundtrigger_middleware_service
sysfs_dm_verity
system_config_service
system_group_file
system_jvmti_agent_prop
system_passwd_file
system_unsolzygote_socket
tethering_service
traced_perf
traced_perf_socket
timezonedetector_service
untrusted_app_29
usb_serial_device
userspace_reboot_prop
userspace_reboot_config_prop
userspace_reboot_exported_prop
vehicle_hal_prop
vendor_apex_file
vendor_boringssl_self_test
vendor_install_recovery
vendor_install_recovery_exec
virtual_ab_prop))