diff --git a/private/property_contexts b/private/property_contexts index 4433bdf7dea1ef6ca05244b2b0082dabc4791ea0..eeb2b6582e7716a99b07072ee7b0d77818f0b340 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -94,6 +94,7 @@ ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 # ctl properties ctl.bootanim u:object_r:ctl_bootanim_prop:s0 +ctl.android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.fuse_ u:object_r:ctl_fuse_prop:s0 ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index 596f33247a9d3e9bda7e29da0beb931f32ed1a6f..f3cd8929624b61eb2ca3ee8d3e60d26fcd5cdd00 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -267,6 +267,9 @@ allow dumpstate self:netlink_socket create_socket_perms_no_ioctl; # newer kernels (e.g. 4.4) have a new class for sockets allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl; +# Allow dumpstate to kill vendor dumpstate service by init +set_prop(dumpstate, ctl_dumpstate_prop) + ### ### neverallow rules ###