Allow SystemServer to set service.adb.tcp.* properties

Required for network adb enable/disable to function

Change-Id: I3e2aacb6b8e9b107dcd229187a5dd76128e20001
This commit is contained in:
Ricardo Cerqueira 2014-11-26 10:33:02 -08:00 committed by Sam Mortimer
parent a1998ab77a
commit e4016afa72
5 changed files with 9 additions and 0 deletions

1
sepolicy/property.te Normal file
View File

@ -0,0 +1 @@
type adbtcp_prop, property_type;

View File

@ -0,0 +1 @@
service.adb.tcp. u:object_r:adbtcp_prop:s0

View File

@ -10,13 +10,16 @@ BOARD_SEPOLICY_UNION += \
file.te \ file.te \
file_contexts \ file_contexts \
genfs_contexts \ genfs_contexts \
property_contexts \
seapp_contexts \ seapp_contexts \
service_contexts \ service_contexts \
auditd.te \ auditd.te \
healthd.te \ healthd.te \
installd.te \ installd.te \
netd.te \ netd.te \
property.te \
recovery.te \ recovery.te \
shell.te \
su.te \ su.te \
sysinit.te \ sysinit.te \
system.te \ system.te \

1
sepolicy/shell.te Normal file
View File

@ -0,0 +1 @@
allow shell adbtcp_prop:property_service set;

View File

@ -1,2 +1,5 @@
allow system_server wallpaper_file:file relabelto; allow system_server wallpaper_file:file relabelto;
allow system_server dalvikcache_data_file:file write; allow system_server dalvikcache_data_file:file write;
# allow adb related properties to be set
allow system_server adbtcp_prop:property_service set;