android_system_sepolicy/apex/com.android.sdkext-file_contexts
Anton Hansson e822545909 Add sepolicy for sdkext module prop
Add a domain for derive_sdk which is allowed to set
persist.com.android.sdkext.sdk_info, readable by all
apps (but should only be read by the BCP).

Bug: 137191822
Test: run derive_sdk, getprop persist.com.android.sdkext.sdk_info
Change-Id: I389116f45faad11fa5baa8d617dda30fb9acec7a
2019-12-05 14:11:50 +00:00

3 lines
100 B
Plaintext

(/.*)? u:object_r:system_file:s0
/bin/derive_sdk u:object_r:derive_sdk_exec:s0