Merge "Sepolicy: Fix comment on apexd:fd use"
diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil
index d9e5755..18fe4cd 100644
--- a/private/compat/28.0/28.0.ignore.cil
+++ b/private/compat/28.0/28.0.ignore.cil
@@ -126,6 +126,7 @@
time_prop
timedetector_service
timezonedetector_service
+ traced_lazy_prop
uri_grants_service
use_memfd_prop
vendor_cgroup_desc_file
diff --git a/private/property_contexts b/private/property_contexts
index b3214c8..3261014 100644
--- a/private/property_contexts
+++ b/private/property_contexts
@@ -64,6 +64,7 @@
persist.service.bdroid. u:object_r:bluetooth_prop:s0
persist.security. u:object_r:system_prop:s0
persist.traced.enable u:object_r:traced_enabled_prop:s0
+traced.lazy. u:object_r:traced_lazy_prop:s0
persist.heapprofd.enable u:object_r:heapprofd_enabled_prop:s0
persist.vendor.overlay. u:object_r:overlay_prop:s0
ro.boot.vendor.overlay. u:object_r:overlay_prop:s0
diff --git a/private/traced.te b/private/traced.te
index 0aeb11b..1e2d7d6 100644
--- a/private/traced.te
+++ b/private/traced.te
@@ -39,6 +39,8 @@
# Allow traced to notify Traceur when a trace ends by setting the
# sys.trace.trace_end_signal property.
set_prop(traced, system_trace_prop)
+# Allow to lazily start producers.
+set_prop(traced, traced_lazy_prop)
###
### Neverallow rules
diff --git a/public/property.te b/public/property.te
index a549ef1..c2b65f0 100644
--- a/public/property.te
+++ b/public/property.te
@@ -81,6 +81,7 @@
type test_harness_prop, property_type;
type time_prop, property_type;
type traced_enabled_prop, property_type;
+type traced_lazy_prop, property_type;
type use_memfd_prop, property_type;
type vold_prop, property_type, core_property_type;
type wifi_log_prop, property_type, log_property_type;
@@ -451,6 +452,7 @@
-test_harness_prop
-time_prop
-traced_enabled_prop
+ -traced_lazy_prop
-vendor_default_prop
-vendor_security_patch_level_prop
-vold_prop
