diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil index 4127fc6a411f0c522dc8c817ba331d1cdc7a8453..21c2da6eefaad1fb6d36ed31d99c1ab143244eba 100644 --- a/private/compat/26.0/26.0.ignore.cil +++ b/private/compat/26.0/26.0.ignore.cil @@ -24,6 +24,7 @@ netd_stable_secret_prop network_watchlist_service package_native_service + property_info slice_service statscompanion_service storaged_data_file diff --git a/private/file_contexts b/private/file_contexts index f0433824b9c45742c7b26be7a2545d6e191527bd..7cb1a0a7826e51d7834f92da2b321b1ccce675ca 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -169,6 +169,7 @@ /dev/xt_qtaguid u:object_r:qtaguid_device:s0 /dev/zero u:object_r:zero_device:s0 /dev/__properties__ u:object_r:properties_device:s0 +/dev/__properties__/property_info u:object_r:property_info:s0 ############################# # System files # diff --git a/public/device.te b/public/device.te index 1d01045296a0f665ca574e97d716b7e1f53f64bb..43c89abd0f97bf4318c752e356c00f4b979465fe 100644 --- a/public/device.te +++ b/public/device.te @@ -59,6 +59,7 @@ type usbaccessory_device, dev_type, mlstrustedobject; type usb_device, dev_type, mlstrustedobject; type properties_device, dev_type; type properties_serial, dev_type; +type property_info, dev_type; type i2c_device, dev_type; # All devices have a uart for the hci diff --git a/public/domain.te b/public/domain.te index eb02021fd0a767935ec93187ec15201e5b063c02..ec0532d5abd44e54b535322c02b46efbd56fc66b 100644 --- a/public/domain.te +++ b/public/domain.te @@ -81,6 +81,7 @@ allow domain proc_random:dir r_dir_perms; allow domain proc_random:file r_file_perms; allow domain properties_device:dir { search getattr }; allow domain properties_serial:file r_file_perms; +allow domain property_info:file r_file_perms; # For now, everyone can access core property files # Device specific properties are not granted by default diff --git a/public/init.te b/public/init.te index f7b850197ffb3d3d1273b68780e460a7d782c594..62406f3e8fe27b29aeae854194de304f261f864f 100644 --- a/public/init.te +++ b/public/init.te @@ -21,6 +21,9 @@ userdebug_or_eng(` allow init properties_device:dir relabelto; allow init properties_serial:file { write relabelto }; allow init property_type:file { create_file_perms relabelto }; +# /dev/__properties__/property_info +allow init properties_device:file create_file_perms; +allow init property_info:file relabelto; # /dev/event-log-tags allow init device:file relabelfrom; allow init runtime_event_log_tags_file:file { open write setattr relabelto create };