mmd: allow mmd.zram.enabled shared between system_server
system_server reads mmd.zram.enabled system property to switch zram
management system between mmd and the old one.
Bug: 393481329
Test: manual
Change-Id: I0222c84152fb2538fbd04fb3e90a829970116f2e
diff --git a/private/property.te b/private/property.te
index 4f7df7d..f42ac47 100644
--- a/private/property.te
+++ b/private/property.te
@@ -112,6 +112,7 @@
system_vendor_config_prop(avf_virtualizationservice_prop)
system_vendor_config_prop(high_barometer_quality_prop)
system_vendor_config_prop(mmd_prop)
+system_vendor_config_prop(mmd_shared_prop)
system_vendor_config_prop(prefetch_boot_prop)
system_vendor_config_prop(widevine_sys_vendor_prop)
diff --git a/private/property_contexts b/private/property_contexts
index b0c1d23..44b6d33 100644
--- a/private/property_contexts
+++ b/private/property_contexts
@@ -1818,4 +1818,5 @@
# Properties for mmd
mmd. u:object_r:mmd_prop:s0
+mmd.zram.enabled u:object_r:mmd_shared_prop:s0 exact bool
mmd.enabled_aconfig u:object_r:mmd_status_prop:s0 exact bool
diff --git a/private/system_server.te b/private/system_server.te
index bfe1c5e..92caa60 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -923,6 +923,9 @@
# Allow system server to determine if system services are enabled
get_prop(system_server, system_service_enable_prop)
+# Allow system server to read shared mmd properties
+get_prop(system_server, mmd_shared_prop)
+
# Create a socket for connections from debuggerd.
allow system_server system_ndebug_socket:sock_file create_file_perms;