sepolicy: allow userinit to set its property

Change-Id: I9d8270d889566d169077a1b1fdaee43059d11ee1
2015-02-04 18:17:31 +01:00 · 2015-02-04 18:17:31 +01:00 · 2ccd36c73f
commit 2ccd36c73f
parent 5e9d050e18
5 changed files with 8 additions and 0 deletions
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@ -9,6 +9,8 @@

 /system/bin/sysinit       u:object_r:sysinit_exec:s0

+/system/etc/init.d/90userinit           u:object_r:userinit_exec:s0
+
 # For minivold in recovery
 /sbin/minivold            u:object_r:vold_exec:s0

--- a/sepolicy/property.te
+++ b/sepolicy/property.te
@ -1,2 +1,3 @@
 type adbtcp_prop, property_type;
 type recovery_prop, property_type;
+type userinit_prop, property_type;
--- a/sepolicy/property_contexts
+++ b/sepolicy/property_contexts
@ -1,3 +1,4 @@
 service.adb.tcp.port          u:object_r:adbtcp_prop:s0
 recovery.perf.mode            u:object_r:recovery_prop:s0
 adb.secure                    u:object_r:recovery_prop:s0
+cm.userinit.active            u:object_r:userinit_prop:s0
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@ -32,6 +32,7 @@ BOARD_SEPOLICY_UNION += \
    system_app.te \
    ueventd.te \
    uncrypt.te \
+    userinit.te \
    vold.te \
    zygote.te \
    mac_permissions.xml
--- a/sepolicy/userinit.te
+++ b/sepolicy/userinit.te
@ -0,0 +1,3 @@
+type userinit_exec, exec_type, file_type;
+
+allow userinit_exec userinit_prop:property_service set;