oxmc
127f5add8b
Remove vendor_default_prop and bluetooth_lea_prop get_prop rules — both violate AOSP neverallow rules (vendor_default_prop is banned for all app domains; bluetooth_lea_prop is a platform type not exported to the vendor policy interface). Remove generic sysfs:file allow for init and system_server — both violate neverallow rules in init.te and coredomain.te; proper labeled sysfs types are needed when specific paths are identified from avc: denied logs. Rename ro.pawlet.ota. -> ro.vendor.pawlet.ota. to satisfy VTS vendor property namespace enforcement.
7 lines
284 B
Plaintext
7 lines
284 B
Plaintext
allow init kernel:system module_request;
|
|
allow init tmpfs:lnk_file create;
|
|
|
|
# Boot receiver tracing — create enable file under tracefs
|
|
allow init debugfs_bootreceiver_tracing:dir { write add_name search };
|
|
allow init debugfs_bootreceiver_tracing:file { create open write getattr };
|