Add contexts for init.svc.* props
To remove bad context names "exported*_prop". Other init.svc.*
properties explicitly become system internal prop.
Bug: 155844385
Test: boot and see no denials
Change-Id: I7a3b4103a4cea77035a6e831e3b6a49a45f15a35
diff --git a/private/property.te b/private/property.te
index ca4dd65..ecbfff3 100644
--- a/private/property.te
+++ b/private/property.te
@@ -7,6 +7,7 @@
system_internal_prop(fastbootd_protocol_prop)
system_internal_prop(gsid_prop)
system_internal_prop(init_perf_lsm_hooks_prop)
+system_internal_prop(init_service_status_private_prop)
system_internal_prop(init_svc_debug_prop)
system_internal_prop(last_boot_reason_prop)
system_internal_prop(netd_stable_secret_prop)
@@ -385,3 +386,10 @@
provisioned_prop
retaildemo_prop
}:file no_rw_file_perms;
+
+neverallow {
+ -init
+} {
+ init_service_status_private_prop
+ init_service_status_prop
+}:property_service set;