PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge stage-aosp-master to aosp-master - DO NOT MERGE

Browse Source 
Change-Id: I46fe648ce4bd015b1ffff8d5a001d33311d2363b
This commit is contained in:
Bill Yi 2020-03-05 09:51:38 -08:00
commit 6b7f6599fa
4 changed files with 10 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
prebuilts/api/29.0/private/adbd.te
View File

@ -23,6 +23,10 @@ recovery_only(`
unix_socket_connect(adbd, recovery, recovery)
')
# Control Perfetto traced and obtain traces from it.
# Needed to allow port forwarding directly to traced.
unix_socket_connect(adbd, traced_consumer, traced)
# Do not sanitize the environment or open fds of the shell. Allow signaling
# created processes.
allow adbd shell:process { noatsecure signal };

4
prebuilts/api/29.0/private/gpuservice.te
View File

@ -31,6 +31,10 @@ allow gpuservice adbd:unix_stream_socket { read write getattr };
# Needed for interactive shell
allow gpuservice devpts:chr_file { read write getattr };
# Needed for dumpstate to dumpsys gpu.
allow gpuservice dumpstate:fd use;
allow gpuservice dumpstate:fifo_file write;
add_service(gpuservice, gpu_service)
# Only uncomment below line when in development

1
prebuilts/api/29.0/public/property_contexts
View File

@ -89,6 +89,7 @@ persist.sys.sf.native_mode u:object_r:exported2_system_prop:s0 exact int
pm.dexopt.ab-ota u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.bg-dexopt u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.boot u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.disable_bg_dexopt u:object_r:exported_pm_prop:s0 exact bool
pm.dexopt.downgrade_after_inactive_days u:object_r:exported_pm_prop:s0 exact int
pm.dexopt.first-boot u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.inactive u:object_r:exported_pm_prop:s0 exact string

13
public/property_contexts
View File

@ -92,6 +92,7 @@ persist.sys.sf.native_mode u:object_r:exported2_system_prop:s0 exact int
pm.dexopt.ab-ota u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.bg-dexopt u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.boot u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.disable_bg_dexopt u:object_r:exported_pm_prop:s0 exact bool
pm.dexopt.downgrade_after_inactive_days u:object_r:exported_pm_prop:s0 exact int
pm.dexopt.first-boot u:object_r:exported_pm_prop:s0 exact string
pm.dexopt.inactive u:object_r:exported_pm_prop:s0 exact string
@ -285,18 +286,6 @@ sys.init.userspace_reboot.in_progress u:object_r:userspace_reboot_exported_prop:
sys.use_memfd u:object_r:use_memfd_prop:s0 exact bool
vold.decrypt u:object_r:exported_vold_prop:s0 exact string
# r/o sanitizer properties, public-readable
ro.sanitize.address u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.cfi u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.default-ub u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.fuzzer u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.hwaddress u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.integer_overflow u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.safe-stack u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.scudo u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.thread u:object_r:exported2_default_prop:s0 exact bool
ro.sanitize.undefined u:object_r:exported2_default_prop:s0 exact bool
# vendor-init-settable|public-readable
aaudio.hw_burst_min_usec u:object_r:exported_default_prop:s0 exact int
aaudio.minimum_sleep_usec u:object_r:exported_default_prop:s0 exact int