Add BUILD_BROKEN_TREBLE_SYSPROP_NEVERALLOW

A new sysprop neverallow rules are mandatory only for devices launching
with R or later. For devices already launched, neverallow rules can be
relaxed with adding following line to BoardConfig.mk:

BUILD_BROKEN_TREBLE_SYSPROP_NEVERALLOW := true

Bug: 131162102
Test: Set PRODUCT_SHIPPING_API_LEVEL := 30 and try building with
changing some system_public_prop to system_internal_prop
Test: m cts sepolicy_tests

Change-Id: Ia215fdcc39d82487446b9972325d8b344945965d
Merged-In: Ia215fdcc39d82487446b9972325d8b344945965d
(cherry picked from commit 7d61bcd7ec43e5f18ab5e58d5579aef8fbc8a5d4)
diff --git a/BoardConfig.mk b/BoardConfig.mk
index 34a761d..f718a00 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -30,6 +30,9 @@
 
 BUILD_BROKEN_DUP_RULES := true
 
+# TODO(b/131162102): remove this after cleaning up accesses of sysprops
+BUILD_BROKEN_TREBLE_SYSPROP_NEVERALLOW := true
+
 BOARD_KERNEL_CMDLINE += androidboot.hardware=$(TARGET_BOOTLOADER_BOARD_NAME) androidboot.console=ttyMSM0 lpm_levels.sleep_disabled=1
 BOARD_KERNEL_CMDLINE += user_debug=31 msm_rtb.filter=0x37 ehci-hcd.park=3
 BOARD_KERNEL_CMDLINE += service_locator.enable=1