From 118e4969d26c10ec2f23e050638dadfcfdce2ed3 Mon Sep 17 00:00:00 2001
From: Pavel Grafov <pgrafov@google.com>
Date: Thu, 18 Jan 2018 17:22:28 +0000
Subject: [PATCH] Allow system apps to read log props.

This is needed to allow system apps to know whether security
logging is enabled, so that they can in this case log additional
audit events.

Test: logged a security event from locally modified KeyChain app.
Bug: 70886042
Change-Id: I9e18d59d72f40510f81d1840e4ac76a654cf6cbd
---
 private/system_app.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/private/system_app.te b/private/system_app.te
index c849aeaf3..c61bdd92a 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -113,6 +113,7 @@ allow system_app {
 
 control_logd(system_app)
 read_runtime_log_tags(system_app)
+get_prop(system_app, device_logging_prop)
 
 # allow system apps to use UDP sockets provided by the system server but not
 # modify them other than to connect
-- 
GitLab