commit 565384db61039317d4e1a169f980796f763fb36c
author Hung-ying Tyan <tyanh@google.com> Fri Apr 26 16:14:52 2019 +0800
committer Hung-ying Tyan <tyanh@google.com> Tue Apr 30 18:29:56 2019 +0800
tree 774045ca75777a04e89005e9b3af1f6bcb199d8b
parent 2798b5fc93505fc30a5b1ae2ba0cc94b8f16aedc

Sepolicy: add dynamic_system_prop

and allow shell and system_app (Settings) to set it to enable Dynamic System Update.
Also allow priv_app (user of the API) to read it.

Bug: 119647479
Bug: 129060539
Test: run the following command on crosshatch-user:
      adb shell setprop persist.sys.fflag.override.settings_dynamic_system 1

Change-Id: I24a5382649c64d36fd05a59bc87faca87e6f0eb8
Merged-In: I24a5382649c64d36fd05a59bc87faca87e6f0eb8

private/system_app.te

diff --git a/private/system_app.te b/private/system_app.te
index d71ef72..e8627151 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -49,6 +49,8 @@
 auditallow system_app net_radio_prop:property_service set;
 auditallow system_app system_radio_prop:property_service set;
 auditallow system_app exported_system_radio_prop:property_service set;
+# Allow Settings to enable Dynamic System Update
+set_prop(system_app, dynamic_system_prop)
 
 # ctl interface
 set_prop(system_app, ctl_default_prop)