PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding labeling for vendor security patch prop

Browse Source 
This will allow adb shell getprop ro.vendor.build.security_patch to
properly return the correct build property, whereas previously it was
offlimits due to lack of label.

Test: adb shell getprop ro.vendor.build.security_patch successfully
returns whatever VENDOR_SECURITY_PATCH is defined to be in the Android
.mk files

Change-Id: Ie8427738125fc7f909ad8d51e4b76558f5544d49
This commit is contained in:
Max Bires 2018-03-29 18:21:31 -07:00
parent d4dd2f5710
commit 5cac1aa99c
6 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
private/compat/26.0/26.0.ignore.cil
View File

@ -112,6 +112,7 @@
untrusted_app_all_devpts
update_engine_log_data_file
vendor_default_prop
vendor_security_patch_level_prop
usbd
usbd_exec
usbd_tmpfs

1
private/compat/27.0/27.0.ignore.cil
View File

@ -91,6 +91,7 @@
usbd_tmpfs
vendor_default_prop
vendor_init
vendor_security_patch_level_prop
vendor_shell
vold_metadata_file
vold_prepare_subdirs

1
public/property.te
View File

@ -53,6 +53,7 @@ type system_radio_prop, property_type, core_property_type;
type vold_prop, property_type, core_property_type;
type wifi_log_prop, property_type, log_property_type;
type wifi_prop, property_type;
type vendor_security_patch_level_prop, property_type;
# Properties for whitelisting
type exported_config_prop, property_type;

1
public/property_contexts
View File

@ -102,6 +102,7 @@ ro.telephony.default_cdma_sub u:object_r:exported3_default_prop:s0 exact int
ro.telephony.default_network u:object_r:exported3_default_prop:s0 exact int
ro.url.legal u:object_r:exported3_default_prop:s0 exact string
ro.url.legal.android_privacy u:object_r:exported3_default_prop:s0 exact string
ro.vendor.build.security_patch u:object_r:vendor_security_patch_level_prop:s0 exact string
ro.zygote u:object_r:exported3_default_prop:s0 exact string
sendbug.preferred.domain u:object_r:exported3_default_prop:s0 exact string
sys.usb.controller u:object_r:exported2_system_prop:s0 exact string

3
public/shell.te
View File

@ -81,6 +81,9 @@ userdebug_or_eng(`
# Read device's serial number from system properties
get_prop(shell, serialno_prop)
# Allow shell to read the vendor security patch level for CTS
get_prop(shell, vendor_security_patch_level_prop)
# Read state of logging-related properties
get_prop(shell, device_logging_prop)

1
public/vendor_init.te
View File

@ -178,6 +178,7 @@ set_prop(vendor_init, log_tag_prop)
set_prop(vendor_init, log_prop)
set_prop(vendor_init, serialno_prop)
set_prop(vendor_init, vendor_default_prop)
set_prop(vendor_init, vendor_security_patch_level_prop)
set_prop(vendor_init, wifi_log_prop)
get_prop(vendor_init, exported2_radio_prop)