Files
pawlet_rpi4/sepolicy/system_server.te
T
oxmc 127f5add8b Fix: SELinux neverallow violations; rename pawlet OTA property to vendor namespace
Remove vendor_default_prop and bluetooth_lea_prop get_prop rules — both violate
AOSP neverallow rules (vendor_default_prop is banned for all app domains;
bluetooth_lea_prop is a platform type not exported to the vendor policy interface).
Remove generic sysfs:file allow for init and system_server — both violate
neverallow rules in init.te and coredomain.te; proper labeled sysfs types are
needed when specific paths are identified from avc: denied logs.
Rename ro.pawlet.ota. -> ro.vendor.pawlet.ota. to satisfy VTS vendor property
namespace enforcement.
2026-06-09 04:40:49 -07:00

2 lines
26 B
Plaintext