commit 6ffdf1b001b7e9ad20a40ed467e851ca40ad86ad
author Inseob Kim <inseob@google.com> Tue Jun 16 20:00:41 2020 +0900
committer Inseob Kim <inseob@google.com> Fri Jun 19 17:47:19 2020 +0900
tree 60a88908f1f7d14e08c2c9442d4a8e3b7e65cd45
parent 832e17b6951490850c006c3ab535983637707c3c

Add new context packagemanager_config_prop

To remove bad context names exported[23]_default_prop

Bug: 155844385
Test: m selinux_policy
Change-Id: Ic4bbc8e45d810368a96f6985c2234798e73be82d
Merged-In: Ic4bbc8e45d810368a96f6985c2234798e73be82d
(cherry picked from commit 072b01438e02e9d3cfba04c768e7a440549cc8b1)

private/property.te

diff --git a/private/property.te b/private/property.te
index 1aa4ddf..eb09f4f 100644
--- a/private/property.te
+++ b/private/property.te
@@ -406,3 +406,11 @@
 } {
   graphics_config_prop
 }:property_service set;
+
+neverallow {
+  -init
+  -dumpstate
+  -system_server
+  -vendor_init
+  -zygote
+} packagemanager_config_prop:file no_rw_file_perms;