diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil index ebd4037dc1d9e9d7725fee945e446512bc816cab..79cadf8f4e8c33766a0c9f46338bff44bfd956d6 100644 --- a/private/compat/26.0/26.0.ignore.cil +++ b/private/compat/26.0/26.0.ignore.cil @@ -118,6 +118,7 @@ thermalserviced thermalserviced_exec thermalserviced_tmpfs + time_prop timedetector_service timezone_service timezonedetector_service diff --git a/private/compat/27.0/27.0.ignore.cil b/private/compat/27.0/27.0.ignore.cil index fe9887e8eb662595b56fe5d93414c1169ccef765..3b3f6f81451db86888bcf31a3eb62323275eb7bf 100644 --- a/private/compat/27.0/27.0.ignore.cil +++ b/private/compat/27.0/27.0.ignore.cil @@ -95,6 +95,7 @@ system_boot_reason_prop system_update_service test_boot_reason_prop + time_prop timedetector_service timezonedetector_service tombstone_wifi_data_file diff --git a/private/property_contexts b/private/property_contexts index 8befae52ab76fb43ae172e5a85faeecac6f42115..6ebad359115484e516c5744d773449e6242a9cd5 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -146,3 +146,6 @@ odm. u:object_r:vendor_default_prop:s0 persist.odm. u:object_r:vendor_default_prop:s0 persist.vendor. u:object_r:vendor_default_prop:s0 vendor. u:object_r:vendor_default_prop:s0 + +# Properties that relate to time / time zone detection behavior. +persist.time. u:object_r:time_prop:s0 diff --git a/private/radio.te b/private/radio.te index b4f539048f3b56816ff9f011a6d1cf0349d6ef6b..9ac2cf17f022c7b75dd88305f6957de5271f9310 100644 --- a/private/radio.te +++ b/private/radio.te @@ -3,3 +3,6 @@ typeattribute radio coredomain; app_domain(radio) read_runtime_log_tags(radio) + +# Telephony code contains time / time zone detection logic so it reads the associated properties. +get_prop(radio, time_prop) diff --git a/private/system_server.te b/private/system_server.te index d3b8bcd33a8d998ae84e27798b96975a7cd102ca..d7bf54aa7377e6febf055fe1857c5e2be376e41e 100644 --- a/private/system_server.te +++ b/private/system_server.te @@ -795,6 +795,9 @@ userdebug_or_eng(` allow system_server functionfs:dir search; allow system_server functionfs:file rw_file_perms; +# system_server contains time / time zone detection logic so reads the associated properties. +get_prop(system_server, time_prop) + ### ### Neverallow rules ### diff --git a/public/property.te b/public/property.te index 8113b82a97dc7cc68f8217d65566c3d8310d774d..e399a5f4c0ed21d28dc9f1b7f3538f0413b1d95b 100644 --- a/public/property.te +++ b/public/property.te @@ -59,6 +59,7 @@ type system_boot_reason_prop, property_type; type system_prop, property_type, core_property_type; type system_radio_prop, property_type, core_property_type; type test_boot_reason_prop, property_type; +type time_prop, property_type; type traced_enabled_prop, property_type; type vold_prop, property_type, core_property_type; type wifi_log_prop, property_type, log_property_type; @@ -402,6 +403,7 @@ compatible_property_only(` -system_prop -system_radio_prop -test_boot_reason_prop + -time_prop -traced_enabled_prop -vendor_default_prop -vendor_security_patch_level_prop