PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add persist.vendor.overlay. to properties

Browse Source 
Allow the system_server to change. Allow the zygote to read it as well.

Test: Have system_server set a property
Change-Id: Ie90eec8b733fa7193861026a3a6e0fb0ba5d5318
This commit is contained in:
Jason Monk 2016-11-09 15:19:05 -05:00
parent 58305da980
commit 0e1cbf568a
4 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
private/property_contexts
View File

@ -56,6 +56,8 @@ persist.sys.audit_safemode u:object_r:safemode_prop:s0
persist.service. u:object_r:system_prop:s0
persist.service.bdroid. u:object_r:bluetooth_prop:s0
persist.security. u:object_r:system_prop:s0
persist.vendor.overlay. u:object_r:overlay_prop:s0
ro.boot.vendor.overlay. u:object_r:overlay_prop:s0
# Boolean property set by system server upon boot indicating
# if device owner is provisioned.

1
public/property.te
View File

@ -41,5 +41,6 @@ type config_prop, property_type, core_property_type;
type device_logging_prop, property_type;
type safemode_prop, property_type;
type hwservicemanager_prop, property_type;
type overlay_prop, property_type;
allow property_type tmpfs:filesystem associate;

1
public/system_server.te
View File

@ -357,6 +357,7 @@ set_prop(system_server, fingerprint_prop)
set_prop(system_server, device_logging_prop)
set_prop(system_server, wifi_prop)
set_prop(system_server, dumpstate_options_prop)
set_prop(system_server, overlay_prop)
userdebug_or_eng(`set_prop(system_server, wifi_log_prop)')
# ctl interface

3
public/zygote.te
View File

@ -88,6 +88,9 @@ userdebug_or_eng(`
allow zygote ion_device:chr_file r_file_perms;
allow zygote tmpfs:dir r_dir_perms;
# Let the zygote access overlays so it can initialize the AssetManager
get_prop(zygote, overlay_prop)
###
### neverallow rules
###