commit 72eb49e1fa0c9e158c817287bd7f9a18b101826d
author Alessandra Loro <aloro@google.com> Fri Jan 27 20:06:28 2023 +0000
committer Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> Fri Jan 27 20:06:28 2023 +0000
tree 5e70b2cbd07a64461594126b7eb9215330b5f6fa
parent ed797bbdf4a0978193e8a17dbbbae5e413988ec8
parent 968d385d373e1aa20eb90fbf709e0d07a13ce31b

Hide ro.debuggable and ro.secure from ephemeral and isolated applications am: 09effc0d78 am: 968d385d37

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2402006

Change-Id: If18ccdaf892eee91df43ebe2629d856078660331
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

prebuilts/api/33.0/public/domain.te

diff --git a/prebuilts/api/33.0/public/domain.te b/prebuilts/api/33.0/public/domain.te
index 4006075..46e9456 100644
--- a/prebuilts/api/33.0/public/domain.te
+++ b/prebuilts/api/33.0/public/domain.te
@@ -129,7 +129,7 @@
 get_prop(domain, socket_hook_prop)
 get_prop(domain, surfaceflinger_prop)
 get_prop(domain, telephony_status_prop)
-get_prop({domain - untrusted_app_all },  userdebug_or_eng_prop)
+get_prop({domain -untrusted_app_all userdebug_or_eng(`-isolated_app -ephemeral_app') },  userdebug_or_eng_prop)
 get_prop(domain, vendor_socket_hook_prop)
 get_prop(domain, vndk_prop)
 get_prop(domain, vold_status_prop)

public/domain.te

diff --git a/public/domain.te b/public/domain.te
index 4006075..46e9456 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -129,7 +129,7 @@
 get_prop(domain, socket_hook_prop)
 get_prop(domain, surfaceflinger_prop)
 get_prop(domain, telephony_status_prop)
-get_prop({domain - untrusted_app_all },  userdebug_or_eng_prop)
+get_prop({domain -untrusted_app_all userdebug_or_eng(`-isolated_app -ephemeral_app') },  userdebug_or_eng_prop)
 get_prop(domain, vendor_socket_hook_prop)
 get_prop(domain, vndk_prop)
 get_prop(domain, vold_status_prop)