diff options
| author | Sami Tolvanen <samitolvanen@google.com> | 2016-02-05 15:42:32 -0800 |
|---|---|---|
| committer | Sami Tolvanen <samitolvanen@google.com> | 2016-02-10 15:51:28 -0800 |
| commit | 9c168711d5f79642a5357cd4c58ad5e88a9795ba (patch) | |
| tree | a0165f44edc07cdba2200c9ce140198ab717b1a8 | |
| parent | c1e48835078d60f969f2e0d6c69a8b7e698dbbac (diff) | |
| download | sepolicy-9c168711d5f79642a5357cd4c58ad5e88a9795ba.tar.gz | |
Allow logd.auditd to reboot to safe mode
Bug: 26902605
Change-Id: Ica825cf2af74f5624cf4091544bd24bb5482dbe7
| -rw-r--r-- | logd.te | 4 | ||||
| -rw-r--r-- | property.te | 1 | ||||
| -rw-r--r-- | property_contexts | 2 | ||||
| -rw-r--r-- | system_server.te | 1 |
4 files changed, 8 insertions, 0 deletions
@@ -22,6 +22,10 @@ userdebug_or_eng(` allow logd pstorefs:dir search; allow logd pstorefs:file r_file_perms; +# Set persist.sys. and sys.powerctl +set_prop(logd, safemode_prop) +set_prop(logd, powerctl_prop) + # Access device logging gating property get_prop(logd, device_logging_prop) diff --git a/property.te b/property.te index c649a90..26d15ff 100644 --- a/property.te +++ b/property.te @@ -33,5 +33,6 @@ type nfc_prop, property_type, core_property_type; type dalvik_prop, property_type, core_property_type; type config_prop, property_type, core_property_type; type device_logging_prop, property_type; +type safemode_prop, property_type; allow property_type tmpfs:filesystem associate; diff --git a/property_contexts b/property_contexts index 6b25ec4..66f1f14 100644 --- a/property_contexts +++ b/property_contexts @@ -44,6 +44,8 @@ persist.logd.security u:object_r:device_logging_prop:s0 persist.log.tag u:object_r:logd_prop:s0 persist.mmc. u:object_r:mmc_prop:s0 persist.sys. u:object_r:system_prop:s0 +persist.sys.safemode u:object_r:safemode_prop:s0 +persist.sys.audit_safemode u:object_r:safemode_prop:s0 persist.service. u:object_r:system_prop:s0 persist.service.bdroid. u:object_r:bluetooth_prop:s0 persist.security. u:object_r:system_prop:s0 diff --git a/system_server.te b/system_server.te index 7050980..c6c41dc 100644 --- a/system_server.te +++ b/system_server.te @@ -282,6 +282,7 @@ allow system_server system_data_file:dir relabelfrom; # Property Service write set_prop(system_server, system_prop) +set_prop(system_server, safemode_prop) set_prop(system_server, dhcp_prop) set_prop(system_server, net_radio_prop) set_prop(system_server, system_radio_prop) |