PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow init to set powerctl property

Browse Source 
NIAP certification requires that all cryptographic functions
undergo a self-test during startup to demonstrate correct
operation. init now performs this check during startup.

The self-test is forked from init. For the child process
to be able to request a reboot it needs permissions to
set the sys.powerctl property.

Bug: 119826244
Test: Built for walleye. When the BoringSSL self test was forced
      to fail the device rebooted into the bootloader, as
      expected.
Change-Id: I2108bf6c345a5804ebd1e2206f9b8fde21a58e64
Merged-In: I4171b1dd0a5e393252ae5c002171ac51c9cbb3e6
This commit is contained in:
Branden Archer 2018-11-27 15:47:12 -08:00
parent 63d07d7586
commit 05477957eb
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
prebuilts/api/28.0/private/init.te
View File

@ -20,3 +20,6 @@ domain_trans(init, { rootfs toolbox_exec }, modprobe)
userdebug_or_eng(` userdebug_or_eng(`
domain_auto_trans(init, logcat_exec, logpersist) domain_auto_trans(init, logcat_exec, logpersist)
') ')
# Allow the BoringSSL self test to request a reboot upon failure
set_prop(init, powerctl_prop)

3
private/init.te
View File

@ -20,3 +20,6 @@ domain_trans(init, { rootfs toolbox_exec }, modprobe)
userdebug_or_eng(` userdebug_or_eng(`
domain_auto_trans(init, logcat_exec, logpersist) domain_auto_trans(init, logcat_exec, logpersist)
') ')
# Allow the BoringSSL self test to request a reboot upon failure
set_prop(init, powerctl_prop)