beckham: Label and adress mods battery prop denials

Change-Id: I333df834477c5fc4040f34a551d635bdcd7e9ec1

beckham: Label and adress mods battery prop denials
2c119e5e · Jeferson Rodrigo de Oliveira · Nolen Johnson · 05e322e1 · 2c119e5e · 2c119e5e
Commit 2c119e5e authored 3 years ago by Jeferson Rodrigo de Oliveira Committed by Nolen Johnson 3 years ago
--- a/sepolicy-mods/vendor/hal_health_default.te
+++ b/sepolicy-mods/vendor/hal_health_default.te
@@ -11,3 +11,4 @@ allow hal_health_default {
 }:file rw_file_perms;

 allow hal_health_default self:binder call;
+allow hal_health_default batt_prop:file { open read getattr };
--- a/sepolicy-mods/vendor/property.te
+++ b/sepolicy-mods/vendor/property.te
+system_public_prop(batt_prop);
--- a/sepolicy-mods/vendor/property_contexts
+++ b/sepolicy-mods/vendor/property_contexts
+sys.mod.batterymode        u:object_r:batt_prop:s0
--- a/sepolicy-mods/vendor/system_app.te
+++ b/sepolicy-mods/vendor/system_app.te
@@ -4,3 +4,6 @@ allow system_app mods_service:service_manager find;
 allow system_app mods_service:service_manager add;

 allow system_app mods_app:unix_stream_socket connectto;
+get_prop(system_app, batt_prop)
+set_prop(system_app, batt_prop)
+
--- a/sepolicy-mods/vendor/system_server.te
+++ b/sepolicy-mods/vendor/system_server.te
 # MotSpeakerHelperProximity
 binder_call(system_server, hal_audio_default)
+get_prop(system_server, batt_prop)