aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeferson <jroliveira.oliveira301@gmail.com>2022-02-24 15:14:05 +0100
committerNolen Johnson <johnsonnolen@gmail.com>2022-03-14 15:34:17 -0400
commit2c119e5e8c27dc118d7efe8797fc51cfc3ac14f3 (patch)
tree9f0f1733e1bf2f2adf6fe885b0e12747fe97c515
parent05e322e127b8e6c1227f3ef7e596569dae1263ca (diff)
beckham: Label and adress mods battery prop denials
Change-Id: I333df834477c5fc4040f34a551d635bdcd7e9ec1
-rw-r--r--sepolicy-mods/vendor/hal_health_default.te1
-rw-r--r--sepolicy-mods/vendor/property.te1
-rw-r--r--sepolicy-mods/vendor/property_contexts1
-rw-r--r--sepolicy-mods/vendor/system_app.te3
-rw-r--r--sepolicy-mods/vendor/system_server.te1
5 files changed, 7 insertions, 0 deletions
diff --git a/sepolicy-mods/vendor/hal_health_default.te b/sepolicy-mods/vendor/hal_health_default.te
index 656e6a7..edd7075 100644
--- a/sepolicy-mods/vendor/hal_health_default.te
+++ b/sepolicy-mods/vendor/hal_health_default.te
@@ -11,3 +11,4 @@ allow hal_health_default {
}:file rw_file_perms;
allow hal_health_default self:binder call;
+allow hal_health_default batt_prop:file { open read getattr };
diff --git a/sepolicy-mods/vendor/property.te b/sepolicy-mods/vendor/property.te
new file mode 100644
index 0000000..e52eff1
--- /dev/null
+++ b/sepolicy-mods/vendor/property.te
@@ -0,0 +1 @@
+system_public_prop(batt_prop);
diff --git a/sepolicy-mods/vendor/property_contexts b/sepolicy-mods/vendor/property_contexts
new file mode 100644
index 0000000..ddb5645
--- /dev/null
+++ b/sepolicy-mods/vendor/property_contexts
@@ -0,0 +1 @@
+sys.mod.batterymode u:object_r:batt_prop:s0
diff --git a/sepolicy-mods/vendor/system_app.te b/sepolicy-mods/vendor/system_app.te
index d8a2d07..4a6f8cb 100644
--- a/sepolicy-mods/vendor/system_app.te
+++ b/sepolicy-mods/vendor/system_app.te
@@ -4,3 +4,6 @@ allow system_app mods_service:service_manager find;
allow system_app mods_service:service_manager add;
allow system_app mods_app:unix_stream_socket connectto;
+get_prop(system_app, batt_prop)
+set_prop(system_app, batt_prop)
+
diff --git a/sepolicy-mods/vendor/system_server.te b/sepolicy-mods/vendor/system_server.te
index 77fbdff..7d901ee 100644
--- a/sepolicy-mods/vendor/system_server.te
+++ b/sepolicy-mods/vendor/system_server.te
@@ -1,2 +1,3 @@
# MotSpeakerHelperProximity
binder_call(system_server, hal_audio_default)
+get_prop(system_server, batt_prop)