commit f52e30b664916bf445e344ebac344ea12e774444
author Bob Chang <bobpcchang@google.com> Mon Dec 09 20:16:54 2019 +0800
committer Bob Chang <bobpcchang@google.com> Mon Dec 09 20:22:45 2019 +0800
tree 70ddf7c282fbc257b3ebd057796de710423fa50c
parent 1a4c796abe13bc471e210f032cc6eba02400bd5a

qti_init_shell: add sensors related sepolicy

Bug: 145734020
Test: able to getprop vendor.sys.adsp.firmware.version
Change-Id: Ib7faf81448b1db4fc34efaf8a300c9b61c01253c
Signed-off-by: Bob Chang <bobpcchang@google.com>

vendor/google/qti_init_shell.te

diff --git a/vendor/google/qti_init_shell.te b/vendor/google/qti_init_shell.te
index 3681c03..29b3b90 100644
--- a/vendor/google/qti_init_shell.te
+++ b/vendor/google/qti_init_shell.te
@@ -1,5 +1,4 @@
-dontaudit qti_init_shell property_socket:sock_file write;
-dontaudit qti_init_shell public_vendor_system_prop:property_service set;
-dontaudit qti_init_shell vendor_toolbox_exec:file execute_no_trans;
-dontaudit qti_init_shell init:unix_stream_socket connectto;
+set_prop(qti_init_shell, public_vendor_system_prop)
+allow qti_init_shell vendor_toolbox_exec:file execute_no_trans;
+
 dontaudit qti_init_shell self:capability kill;