diff --git a/sepolicy/vendor/dockservice_app.te b/sepolicy/vendor/dockservice_app.te index 529dab5..36dda8d 100644 --- a/sepolicy/vendor/dockservice_app.te +++ b/sepolicy/vendor/dockservice_app.te @@ -51,3 +51,9 @@ allow dockservice_app hal_power_service:service_manager find; allow dockservice_app joycon_service:service_manager find; allow dockservice_app joycond:binder call; + +# Allow settings persist.devicesettingsnx.* properties - NEVERALLOW +set_prop(dockservice_app, vendor_persist_devicesettingsnx_prop) + +# Allow dockservice to set persist.joycond.* properties - NEVERALLOW +set_prop(dockservice_app, vendor_persist_joycond_prop) diff --git a/sepolicy/vendor/property.te b/sepolicy/vendor/property.te index ab1aeac..8f01725 100644 --- a/sepolicy/vendor/property.te +++ b/sepolicy/vendor/property.te @@ -1,2 +1,5 @@ +# DeviceSettings Properties +vendor_public_prop(vendor_persist_devicesettingsnx_prop) + # IIO Sensors vendor_public_prop(vendor_iio_sensors_prop); diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index bf38e24..ecb0750 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,2 +1,5 @@ +# DeviceSettings Properties +persist.devicesettingsnx. u:object_r:vendor_persist_devicesettingsnx_prop:s0 + # IIO Sensors ro.vendor.iio. u:object_r:vendor_iio_sensors_prop:s0