Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 78abd63b authored by Michael Bestas's avatar Michael Bestas Committed by Jonathan Klee
Browse files

Restrict access to custom properties 

Change-Id: I2e8b74701ec3f3ac9f41c0bdb79646d65b90ff6a
parent bd200eb7

common/private/property.te

+6 −0
Original line number Diff line number Diff line 
# Custom legal URL

system_internal_prop(legal_url_prop)



# Custom version

system_internal_prop(custom_version_prop)



# Recovery update

system_internal_prop(recovery_update_prop)

common/private/property_contexts

+9 −0
Original line number Diff line number Diff line
@@ -5,6 +5,15 @@ vendor.camera.aux.packagelist u:object_r:vendor_persist_camera_prop:s0 
# Bluetooth

bluetooth.hci.disabled_commands        u:object_r:bluetooth_config_prop:s0



# Custom legal URL

ro.lineagelegal.url                    u:object_r:legal_url_prop:s0



# Custom version

ro.lineage.version                     u:object_r:custom_version_prop:s0

ro.lineage.display.version             u:object_r:custom_version_prop:s0

ro.lineage.build.version               u:object_r:custom_version_prop:s0

ro.lineage.releasetype                 u:object_r:custom_version_prop:s0



# Radio

ro.telephony.use_old_mnc_mcc_format    u:object_r:telephony_config_prop:s0

common/private/recovery.te

+3 −0
Original line number Diff line number Diff line
@@ -3,6 +3,9 @@ userdebug_or_eng(` 
permissive recovery;

')



# Custom version

get_prop(recovery, custom_version_prop)



# Volume manager

r_dir_file(recovery, sdcard_type)

allow recovery block_device:dir create_dir_perms;

common/private/shell.te

0 → 100644
+1 −0
Original line number Diff line number Diff line 
get_prop(shell, custom_version_prop)

common/private/system_app.te

+6 −0
Original line number Diff line number Diff line 
# Allow Settings to read custom legal URL

get_prop(system_app, legal_url_prop)



# Allow Settings/LineageParts to read custom version

get_prop(system_app, custom_version_prop)



# Allow Settings to read ro.vendor.build.security_patch

get_prop(system_app, vendor_security_patch_level_prop)