Skip to content
Snippets Groups Projects
  • Max Bires's avatar
    5cac1aa9
    Adding labeling for vendor security patch prop · 5cac1aa9
    Max Bires authored
    This will allow adb shell getprop ro.vendor.build.security_patch to
    properly return the correct build property, whereas previously it was
    offlimits due to lack of label.
    
    Test: adb shell getprop ro.vendor.build.security_patch successfully
    returns whatever VENDOR_SECURITY_PATCH is defined to be in the Android
    .mk files
    
    Change-Id: Ie8427738125fc7f909ad8d51e4b76558f5544d49
    5cac1aa9
    History
    Adding labeling for vendor security patch prop
    Max Bires authored
    This will allow adb shell getprop ro.vendor.build.security_patch to
    properly return the correct build property, whereas previously it was
    offlimits due to lack of label.
    
    Test: adb shell getprop ro.vendor.build.security_patch successfully
    returns whatever VENDOR_SECURITY_PATCH is defined to be in the Android
    .mk files
    
    Change-Id: Ie8427738125fc7f909ad8d51e4b76558f5544d49
27.0.ignore.cil 2.74 KiB
;; new_objects - a collection of types that have been introduced that have no
;;   analogue in older policy.  Thus, we do not need to map these types to
;;   previous ones.  Add here to pass checkapi tests.
(typeattribute new_objects)
(typeattributeset new_objects
  ( adb_service
    atrace
    binder_calls_stats_service
    blank_screen
    blank_screen_exec
    blank_screen_tmpfs
    bootloader_boot_reason_prop
    bpfloader
    bpfloader_exec
    cgroup_bpf
    crossprofileapps_service
    exported2_config_prop
    exported2_default_prop
    exported2_radio_prop
    exported2_system_prop
    exported2_vold_prop
    exported3_default_prop
    exported3_radio_prop
    exported3_system_prop
    exported_config_prop
    exported_dalvik_prop
    exported_default_prop
    exported_dumpstate_prop
    exported_ffs_prop
    exported_fingerprint_prop
    exported_overlay_prop
    exported_pm_prop
    exported_radio_prop
    exported_secure_prop
    exported_system_prop
    exported_system_radio_prop
    exported_vold_prop
    fs_bpf
    hal_authsecret_hwservice
    hal_confirmationui_hwservice
    hal_lowpan_hwservice
    hal_secure_element_hwservice
    hal_usb_gadget_hwservice
    incident_helper
    incident_helper_exec
    last_boot_reason_prop
    lowpan_device
    lowpan_prop
    lowpan_service
    mediaextractor_update_service
    network_watchlist_data_file
    network_watchlist_service
    perfetto
    perfetto_exec
    perfetto_tmpfs
    perfetto_traces_data_file
    perfprofd_service
    property_info
    secure_element
    secure_element_device
    secure_element_service
    secure_element_tmpfs
    slice_service
    stats
    stats_data_file
    stats_exec
    stats_service
    statscompanion_service
    statsd
    statsd_exec
    statsd_tmpfs
    storaged_data_file
    system_boot_reason_prop
    system_update_service
    tombstone_wifi_data_file
    trace_data_file
    traced
    traced_consumer_socket
    traced_exec
    traced_probes
    traced_probes_exec
    traced_probes_tmpfs
    traced_producer_socket
    traced_tmpfs
    traceur_app
    traceur_app_tmpfs
    untrusted_app_all_devpts
    update_engine_log_data_file
    usbd
    usbd_exec
    usbd_tmpfs
    vendor_default_prop
    vendor_init
    vendor_security_patch_level_prop
    vendor_shell
    vold_metadata_file
    vold_prepare_subdirs
    vold_prepare_subdirs_exec
    vold_service
    wm_trace_data_file
    wpantund
    wpantund_exec
    wpantund_service
    wpantund_tmpfs))

;; private_objects - a collection of types that were labeled differently in
;;     older policy, but that should not remain accessible to vendor policy.
;;     Thus, these types are also not mapped, but recorded for checkapi tests
(typeattribute priv_objects)
(typeattributeset priv_objects (untrusted_app_27_tmpfs))