commit 5eacf7246030ff4b63b738f96b8b69f028c524f2
author Inseob Kim <inseob@google.com> Wed Jul 01 01:27:49 2020 +0900
committer Inseob Kim <inseob@google.com> Wed Jul 01 02:29:53 2020 +0000
tree 2dc1edfacac16960dcdeb17e1bb881e78cf058d5
parent a24f99f5bd2943baf29325fa2305360be2e6a99b

Allow apps to read packagemanager_config_prop

To fix regression of CTS privappPermissionsMustBeEnforced

Bug: 159647344
Test: atest PrivappPermissionsTest#privappPermissionsMustBeEnforced
Change-Id: I88af05305f9aef6e813d0a72adad63b6b8f99487
Merged-In: I88af05305f9aef6e813d0a72adad63b6b8f99487

private/property.te

diff --git a/private/property.te b/private/property.te
index eb09f4f..77d3dff 100644
--- a/private/property.te
+++ b/private/property.te
@@ -408,9 +408,7 @@
 }:property_service set;
 
 neverallow {
-  -init
-  -dumpstate
-  -system_server
+  -coredomain
+  -appdomain
   -vendor_init
-  -zygote
 } packagemanager_config_prop:file no_rw_file_perms;