diff --git a/private/property_contexts b/private/property_contexts index de09d4a60..1b2743284 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -95,6 +95,7 @@ ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 # ctl properties ctl.bootanim u:object_r:ctl_bootanim_prop:s0 +ctl.android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.fuse_ u:object_r:ctl_fuse_prop:s0 ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index 62762d3e5..0269ce14c 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -267,6 +267,9 @@ allow dumpstate self:netlink_socket create_socket_perms_no_ioctl; # newer kernels (e.g. 4.4) have a new class for sockets allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl; +# Allow dumpstate to kill vendor dumpstate service by init +set_prop(dumpstate, ctl_dumpstate_prop) + ### ### neverallow rules ###