Add tunables to control prefetch
Bug: 362507272
Test: prefetch record/replay
Change-Id: Id9b3efdf5ed3fdff35ddb3f82b6f41b54458c88e
Signed-off-by: Akilesh Kailash <akailash@google.com>
diff --git a/private/prefetch.te b/private/prefetch.te
index c7ee8b1..21287f3 100644
--- a/private/prefetch.te
+++ b/private/prefetch.te
@@ -13,15 +13,12 @@
allow prefetch prefetch_metadata_file:dir rw_dir_perms;
allow prefetch prefetch_metadata_file:file create_file_perms;
+get_prop(prefetch, prefetch_boot_prop);
+set_prop(prefetch, prefetch_service_prop);
+
# Disallow other domains controlling prefetch service.
neverallow {
domain
-init
-shell
} ctl_prefetch_prop:property_service set;
-
-# Disallow other domains controlling prefetch_boot_prop.
-neverallow {
- domain
- -init
-} prefetch_boot_prop:property_service set;