diff --git a/private/property_contexts b/private/property_contexts index de09d4a60cc7689e998b0334172d3ceee00ec5f4..1b2743284669df8c5753ab3962a2dbec476269e3 100644 --- a/private/property_contexts +++ b/private/property_contexts @@ -95,6 +95,7 @@ ro.persistent_properties.ready u:object_r:persistent_properties_ready_prop:s0 # ctl properties ctl.bootanim u:object_r:ctl_bootanim_prop:s0 +ctl.android.hardware.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.dumpstate u:object_r:ctl_dumpstate_prop:s0 ctl.fuse_ u:object_r:ctl_fuse_prop:s0 ctl.mdnsd u:object_r:ctl_mdnsd_prop:s0 diff --git a/public/dumpstate.te b/public/dumpstate.te index 62762d3e5ca8183269979b0fd6fe02383b7431d3..0269ce14cda4fa18083ac1eb846578ea149375bb 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -267,6 +267,9 @@ allow dumpstate self:netlink_socket create_socket_perms_no_ioctl; # newer kernels (e.g. 4.4) have a new class for sockets allow dumpstate self:netlink_generic_socket create_socket_perms_no_ioctl; +# Allow dumpstate to kill vendor dumpstate service by init +set_prop(dumpstate, ctl_dumpstate_prop) + ### ### neverallow rules ###