commit d823ca236f33504ad113f6d04c12892715fcf0c3
author LuK1337 <priv.luk@gmail.com> Mon Sep 26 16:46:16 2016 +0200
committer LuK1337 <priv.luk@gmail.com> Mon Sep 26 16:47:24 2016 +0200
tree 177c443dadb8ae0ea8cdf91baaffe7d63cb20f63
parent 2bdb18f3cd6a11a9f9afed751c2bfdca41f8f7dc

sepolicy: Fix adbsecure_prop denials

Change-Id: I78a5570f330e703b7f7ac2b34370a83bbb2a0d87

sepolicy/system_app.te

diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te
index 490ccd0..d24b10e 100644
--- a/sepolicy/system_app.te
+++ b/sepolicy/system_app.te
@@ -6,3 +6,6 @@
 
 # Boot animation
 allow system_app ctl_bootanim_prop:property_service set;
+
+# Settings app wants to read ro.adb.secure
+get_prop(system_app, adbsecure_prop)

sepolicy/system_server.te

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index ce9b6bd..61b8565 100644
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -9,3 +9,5 @@
 allow system_server storage_stub_file:dir { getattr };
 
 allow system_server media_rw_data_file:dir r_dir_perms;
+
+get_prop(system_server, adbsecure_prop)