Add ITradeInMode service sepolicy.
This defines a new service for the ITradeInMode, and grants it (through
system_server) permissions to modify persist.adb.tradeinmode.
Bug: 307713521
Test: manual test
Change-Id: I0afb349863aaf8488dd3dabaf8e7319e297bffaf
diff --git a/private/priv_app.te b/private/priv_app.te
index bb5da7c..1ef5be1 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -136,6 +136,9 @@
# Allow priv_apps to check whether Dynamic System Update is enabled
get_prop(priv_app, dynamic_system_prop)
+# Allow privileged apps to read trade in mode property
+get_prop(priv_app, adbd_tradeinmode_prop)
+
# suppress denials for non-API accesses.
dontaudit priv_app exec_type:file getattr;
dontaudit priv_app device:dir read;