commit 6cb91a086ebd642f3756152c0dbbc4314cc1f83c
author Jeongik Cha <jeongik@google.com> Wed Nov 15 22:51:14 2023 +0900
committer Jeongik Cha <jeongik@google.com> Fri Nov 17 01:22:37 2023 +0900
tree b3c1882f11ae82001cfbaeaaf772ac97af5777ea
parent 41f36eda49e1f56773e68b6c26cd4e467d850ce9

declare setupwizard_mode_prop as system_vendor_config_prop

1. declare setupwizard_mode_prop for ro.setupwizard.mode
2. that prop could be set during vendor_init, so changed prop type

Bug: 310208141
Test: boot and check if there is no sepolicy issue
Change-Id: I89246ab2c686db139cad48550b860d69a41106ff

private/property.te

diff --git a/private/property.te b/private/property.te
index e1b42a0..9eed4de 100644
--- a/private/property.te
+++ b/private/property.te
@@ -605,6 +605,12 @@
 neverallow {
   domain
   -init
+  -vendor_init
+} setupwizard_mode_prop:property_service set;
+
+neverallow {
+  domain
+  -init
 } setupwizard_prop:property_service set;
 
 # ro.product.property_source_order is useless after initialization of ro.product.* props.