diff --git a/private/property_contexts b/private/property_contexts index ecde9d3ea43f9e0babbb2547d7d6c46edfa2c03a..1478635fffeb59ab17f106a840f2dcebff42c039 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -93,6 +93,7 @@ ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 # ctl properties ctl.bootanim u:object_r:ctl_bootanim_prop:s0 +ctl.android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.fuse_ u:object_r:ctl_fuse_prop:s0 ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index 8906f5dcf4c8431ec3aacc0a8fc502519fb29a85..c8e5de2f8c6038bfa04a75feb4294a5eddf507e2 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -271,6 +271,9 @@ allow dumpstate self:netlink_socket create_socket_perms_no_ioctl; # newer kernels (e.g. 4.4) have a new class for sockets allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl; +# Allow dumpstate to kill vendor dumpstate service by init +set_prop(dumpstate, ctl_dumpstate_prop) + ### ### neverallow rules ###