From c327cda0fda77c972209fe2d1d9d3dd172706864 Mon Sep 17 00:00:00 2001 From: Kyle Harrison Date: Thu, 12 Nov 2020 17:10:57 +0000 Subject: [PATCH] flo: sepolicy: Fix userspace_reboot prop denials - userspace_reboot_exported_prop - userspace_reboot_config_prop Change-Id: Ibec834df41345d1268b1eea4ae88b2fd5d37dd55 --- sepolicy/bootanim.te | 1 + sepolicy/system_server.te | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 sepolicy/bootanim.te diff --git a/sepolicy/bootanim.te b/sepolicy/bootanim.te new file mode 100644 index 0000000..c6888a5 --- /dev/null +++ b/sepolicy/bootanim.te @@ -0,0 +1 @@ +get_prop(bootanim, userspace_reboot_exported_prop); diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te index 78bdbee..bea5c2d 100644 --- a/sepolicy/system_server.te +++ b/sepolicy/system_server.te @@ -28,3 +28,6 @@ allow system_server sensors_data_file:dir r_file_perms; allow system_server sensors_socket:sock_file getattr; allow system_server thermal_service:service_manager find; + +get_prop(system_server, userspace_reboot_exported_prop); +get_prop(system_server, userspace_reboot_config_prop);