Allow apps to read packagemanager_config_prop
To fix regression of CTS privappPermissionsMustBeEnforced
Bug: 159647344
Test: atest PrivappPermissionsTest#privappPermissionsMustBeEnforced
Change-Id: I88af05305f9aef6e813d0a72adad63b6b8f99487
Merged-In: I88af05305f9aef6e813d0a72adad63b6b8f99487
diff --git a/private/app.te b/private/app.te
index 27ef097..7d29134 100644
--- a/private/app.te
+++ b/private/app.te
@@ -4,6 +4,7 @@
get_prop(appdomain, boot_status_prop)
get_prop(appdomain, dalvik_config_prop)
+get_prop(appdomain, packagemanager_config_prop)
get_prop(appdomain, surfaceflinger_color_prop)
get_prop(appdomain, systemsound_config_prop)
get_prop(appdomain, telephony_config_prop)
diff --git a/private/property.te b/private/property.te
index eb09f4f..77d3dff 100644
--- a/private/property.te
+++ b/private/property.te
@@ -408,9 +408,7 @@
}:property_service set;
neverallow {
- -init
- -dumpstate
- -system_server
+ -coredomain
+ -appdomain
-vendor_init
- -zygote
} packagemanager_config_prop:file no_rw_file_perms;