PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pi-qpr1-release PQ1A.181105.017.A1 to pi-platform-release

Browse Source 
Change-Id: I94ccbff6a38bfa1c27eb39b0caf4ec0ab97fee3e
This commit is contained in:
Bill Yi 2018-11-28 18:35:05 -08:00
commit 069ebe0e07
14 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
prebuilts/api/28.0/private/compat/26.0/26.0.ignore.cil
View File

@ -23,6 +23,7 @@
e2fs
e2fs_exec
exfat
exported_audio_prop
exported_bluetooth_prop
exported_config_prop
exported_dalvik_prop

1
prebuilts/api/28.0/private/compat/27.0/27.0.ignore.cil
View File

@ -27,6 +27,7 @@
exported3_default_prop
exported3_radio_prop
exported3_system_prop
exported_audio_prop
exported_bluetooth_prop
exported_config_prop
exported_dalvik_prop

1
prebuilts/api/28.0/private/surfaceflinger.te
View File

@ -14,6 +14,7 @@ read_runtime_log_tags(surfaceflinger)
hal_client_domain(surfaceflinger, hal_graphics_allocator)
hal_client_domain(surfaceflinger, hal_graphics_composer)
hal_client_domain(surfaceflinger, hal_configstore)
hal_client_domain(surfaceflinger, hal_power)
allow surfaceflinger hidl_token_hwservice:hwservice_manager find;
# Perform Binder IPC.

4
prebuilts/api/28.0/private/system_server.te
View File

@ -536,6 +536,10 @@ get_prop(system_server, serialno_prop)
# Read/write the property which keeps track of whether this is the first start of system_server
set_prop(system_server, firstboot_prop)
# Audio service in system server can read exported audio properties,
# such as camera shutter enforcement
get_prop(system_server, exported_audio_prop)
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;

1
prebuilts/api/28.0/public/property.te
View File

@ -66,6 +66,7 @@ type wifi_prop, property_type;
type vendor_security_patch_level_prop, property_type;
# Properties for whitelisting
type exported_audio_prop, property_type;
type exported_bluetooth_prop, property_type;
type exported_config_prop, property_type;
type exported_dalvik_prop, property_type;

1
prebuilts/api/28.0/public/property_contexts
View File

@ -3,6 +3,7 @@ persist.radio.airplane_mode_on u:object_r:exported2_radio_prop:s0 exact int
# vendor-init-settable
af.fast_track_multiplier u:object_r:exported3_default_prop:s0 exact int
audio.camerasound.force u:object_r:exported_audio_prop:s0 exact bool
camera.disable_zsl_mode u:object_r:exported3_default_prop:s0 exact bool
camera.fifo.disable u:object_r:exported3_default_prop:s0 exact int
dalvik.vm.appimageformat u:object_r:exported_dalvik_prop:s0 exact string

1
prebuilts/api/28.0/public/vendor_init.te
View File

@ -170,6 +170,7 @@ not_compatible_property(`
set_prop(vendor_init, bluetooth_a2dp_offload_prop)
set_prop(vendor_init, debug_prop)
set_prop(vendor_init, exported_audio_prop)
set_prop(vendor_init, exported_bluetooth_prop)
set_prop(vendor_init, exported_config_prop)
set_prop(vendor_init, exported_dalvik_prop)

1
private/compat/26.0/26.0.ignore.cil
View File

@ -23,6 +23,7 @@
e2fs
e2fs_exec
exfat
exported_audio_prop
exported_bluetooth_prop
exported_config_prop
exported_dalvik_prop

1
private/compat/27.0/27.0.ignore.cil
View File

@ -27,6 +27,7 @@
exported3_default_prop
exported3_radio_prop
exported3_system_prop
exported_audio_prop
exported_bluetooth_prop
exported_config_prop
exported_dalvik_prop

1
private/surfaceflinger.te
View File

@ -14,6 +14,7 @@ read_runtime_log_tags(surfaceflinger)
hal_client_domain(surfaceflinger, hal_graphics_allocator)
hal_client_domain(surfaceflinger, hal_graphics_composer)
hal_client_domain(surfaceflinger, hal_configstore)
hal_client_domain(surfaceflinger, hal_power)
allow surfaceflinger hidl_token_hwservice:hwservice_manager find;
# Perform Binder IPC.

4
private/system_server.te
View File

@ -536,6 +536,10 @@ get_prop(system_server, serialno_prop)
# Read/write the property which keeps track of whether this is the first start of system_server
set_prop(system_server, firstboot_prop)
# Audio service in system server can read exported audio properties,
# such as camera shutter enforcement
get_prop(system_server, exported_audio_prop)
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;

1
public/property.te
View File

@ -66,6 +66,7 @@ type wifi_prop, property_type;
type vendor_security_patch_level_prop, property_type;
# Properties for whitelisting
type exported_audio_prop, property_type;
type exported_bluetooth_prop, property_type;
type exported_config_prop, property_type;
type exported_dalvik_prop, property_type;

1
public/property_contexts
View File

@ -3,6 +3,7 @@ persist.radio.airplane_mode_on u:object_r:exported2_radio_prop:s0 exact int
# vendor-init-settable
af.fast_track_multiplier u:object_r:exported3_default_prop:s0 exact int
audio.camerasound.force u:object_r:exported_audio_prop:s0 exact bool
camera.disable_zsl_mode u:object_r:exported3_default_prop:s0 exact bool
camera.fifo.disable u:object_r:exported3_default_prop:s0 exact int
dalvik.vm.appimageformat u:object_r:exported_dalvik_prop:s0 exact string

1
public/vendor_init.te
View File

@ -170,6 +170,7 @@ not_compatible_property(`
set_prop(vendor_init, bluetooth_a2dp_offload_prop)
set_prop(vendor_init, debug_prop)
set_prop(vendor_init, exported_audio_prop)
set_prop(vendor_init, exported_bluetooth_prop)
set_prop(vendor_init, exported_config_prop)
set_prop(vendor_init, exported_dalvik_prop)