Merge "Add neverallow rules to restrict reading radio_prop" am: 310e8a55

am: c292460c

Change-Id: I6ac13a2bcf27956c2a8c87a61a46117acb3ab455

public/property.te

@@ -183,10 +183,19 @@ compatible_property_only(`
     exported3_default_prop
     exported3_system_prop
     -debug_prop
-    -fingerprint_prop
     -logd_prop
     -nfc_prop
     -powerctl_prop
     -radio_prop
   }:file no_rw_file_perms;
+
+  neverallow {
+    domain
+    -coredomain
+    -appdomain
+    -rild
+    -vendor_init
+  } {
+    radio_prop
+  }:file no_rw_file_perms;
 ')