From 1957ab0ba82de2a38256b6426aa817c0b4379a29 Mon Sep 17 00:00:00 2001 From: Aayush Gupta Date: Sat, 26 Dec 2020 17:03:00 +0530 Subject: [PATCH] non_plat: Allow vendor_init to set mtk_dsbp_support_prop DSBP property is set by multiple mediatek devices to declare support for the same. It is already labeled in property_contexts but seems to missing permission for vendor_init to actually set it. Denial observed without this change: [ 4.713173] .(7)[1:init]selinux: avc: denied { set } for property=persist.vendor.radio.mtk_dsbp_support pid=1 uid=0 gid=0 scontext=u:r:vendor_init:s0 tcontext=u:object_r:mtk_dsbp_support_prop:s0 tclass=property_service permissive=1\x0a Test: Boot and observe that propery is set without any denial Signed-off-by: Aayush Gupta Change-Id: I0cc0c2cadbf9edb3fb205b9e52074f852fe08658 --- non_plat/vendor_init.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/non_plat/vendor_init.te b/non_plat/vendor_init.te index 4bff608..20588e2 100644 --- a/non_plat/vendor_init.te +++ b/non_plat/vendor_init.te @@ -85,3 +85,6 @@ set_prop(vendor_init, vendor_wifi_version) # MTK camera property set_prop(vendor_init, mtk_camera_prop) + +# MTK DSBP property +set_prop(vendor_init, mtk_dsbp_support_prop)