commit 072b01438e02e9d3cfba04c768e7a440549cc8b1
author Inseob Kim <inseob@google.com> Tue Jun 16 20:00:41 2020 +0900
committer Inseob Kim <inseob@google.com> Fri Jun 19 12:12:35 2020 +0900
tree ceb26dc9c92030e59f09710b415f9b795f49dc2a
parent 24364492c6491ed78c489c1e16960aad30fcf450

Add new context packagemanager_config_prop

To remove bad context names exported[23]_default_prop

Bug: 155844385
Test: m selinux_policy
Change-Id: Ic4bbc8e45d810368a96f6985c2234798e73be82d

private/property.te

diff --git a/private/property.te b/private/property.te
index b5505e5..6591a9c 100644
--- a/private/property.te
+++ b/private/property.te
@@ -414,3 +414,10 @@
   surfaceflinger_display_prop
 }:property_service set;
 
+neverallow {
+  -init
+  -dumpstate
+  -system_server
+  -vendor_init
+  -zygote
+} packagemanager_config_prop:file no_rw_file_perms;