sepolicy: Fix adbsecure_prop denials

Change-Id: I78a5570f330e703b7f7ac2b34370a83bbb2a0d87
8 years ago · d823ca236f
parent 2bdb18f3cd
commit d823ca236f
2 changed files with 5 additions and 0 deletions
--- a/sepolicy/system_app.te
+++ b/sepolicy/system_app.te
@ -6,3 +6,6 @@ allow system_app media_rw_data_file:file create_file_perms;

 # Boot animation
 allow system_app ctl_bootanim_prop:property_service set;
+
+# Settings app wants to read ro.adb.secure
+get_prop(system_app, adbsecure_prop)
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@ -9,3 +9,5 @@ allow system_server persist_property_file:file { create_file_perms unlink };
 allow system_server storage_stub_file:dir { getattr };

 allow system_server media_rw_data_file:dir r_dir_perms;
+
+get_prop(system_server, adbsecure_prop)