diff --git a/mediaserver.te b/mediaserver.te index 4b299a025b5bc73645cd3c414cbcfa712aba45fd..0181e29ecf75a81cac621c0dde9e61a732478fe7 100644 --- a/mediaserver.te +++ b/mediaserver.te @@ -3,6 +3,7 @@ type mediaserver, domain; type mediaserver_exec, exec_type, file_type; init_daemon_domain(mediaserver) +unix_socket_connect(mediaserver, property, init) net_domain(mediaserver) typeattribute mediaserver mlstrustedsubject; allow mediaserver kernel:system module_request; @@ -43,3 +44,4 @@ allow mediaserver qtaguid_device:chr_file r_file_perms; allow mediaserver rild:unix_stream_socket connectto; allow mediaserver tee_device:chr_file rw_file_perms; +allow mediaserver audio_prop:property_service set; diff --git a/property.te b/property.te index b62004eff26e2a9705ba17f604a31c8a08fbf739..ed84c641fa817f0a1b391928d532b7ef2c0563d1 100644 --- a/property.te +++ b/property.te @@ -7,3 +7,4 @@ type rild_prop, property_type; type ctl_default_prop, property_type; type ctl_dumpstate_prop, property_type; type ctl_rildaemon_prop, property_type; +type audio_prop, property_type; diff --git a/property_contexts b/property_contexts index a08ae8066e09fdbf8fc9a4b9b65834fa576e1e9e..d86bcb628a03ef3e32f63b55ca09e2e78f1de499 100644 --- a/property_contexts +++ b/property_contexts @@ -29,6 +29,7 @@ log. u:object_r:shell_prop:s0 service.adb.root u:object_r:shell_prop:s0 service.adb.tcp.port u:object_r:shell_prop:s0 +persist.audio. u:object_r:audio_prop:s0 persist.sys. u:object_r:system_prop:s0 persist.service. u:object_r:system_prop:s0 persist.security. u:object_r:system_prop:s0