Skip to content
Snippets Groups Projects
Commit 32c4a27c authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Refine rules for accessing /dev/__properties__

Don't allow processes to list out the contents of the directory
/dev/__properties__. This is an implementation specific detail that
shouldn't be visible to processes.

Test: Device boots and no problems reading individual properties.
Test: ls -la /dev/__properties__ fails
Change-Id: I4df6a829b0d22e30fb2c38030c690fc4a356f6a3
parent 804547bc
No related branches found
No related tags found
No related merge requests found
......@@ -77,7 +77,7 @@ allow { domain -servicemanager } hwbinder_device:chr_file rw_file_perms;
allow domain ptmx_device:chr_file rw_file_perms;
allow domain alarm_device:chr_file r_file_perms;
allow domain random_device:chr_file rw_file_perms;
allow domain properties_device:dir r_dir_perms;
allow domain properties_device:dir { search getattr };
allow domain properties_serial:file r_file_perms;
# For now, everyone can access core property files
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment