commit e49714542ee846a7b14c8edb78303ec94cb4836e
author Jaekyun Seok <jaekyun@google.com> Thu Oct 19 16:54:49 2017 +0900
committer Jeffrey Vander Stoep <jeffv@google.com> Wed Jan 10 16:15:25 2018 +0000
tree d215371716907651c154c87f323e25bc2c16ccb7
parent c80f9e037bedb09d08a261f255f87ea105fa371b

Whitelist exported platform properties

This CL lists all the exported platform properties in
private/exported_property_contexts.

Additionally accessing core_property_type from vendor components is
restricted.
Instead public_readable_property_type is used to allow vendor components
to read exported platform properties, and accessibility from
vendor_init is also specified explicitly.

Note that whitelisting would be applied only if
PRODUCT_COMPATIBLE_PROPERTY is set on.

Bug: 38146102
Test: tested on walleye with PRODUCT_COMPATIBLE_PROPERTY=true
Change-Id: I304ba428cc4ca82668fec2ddeb17c971e7ec065e

private/compat/26.0/26.0.ignore.cil

diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil
index f70cb7c..1d3e27b 100644
--- a/private/compat/26.0/26.0.ignore.cil
+++ b/private/compat/26.0/26.0.ignore.cil
@@ -10,6 +10,24 @@
     crossprofileapps_service
     e2fs
     e2fs_exec
+    exported_config_prop
+    exported_dalvik_prop
+    exported_default_prop
+    exported_dumpstate_prop
+    exported_ffs_prop
+    exported_overlay_prop
+    exported_pm_prop
+    exported_radio_prop
+    exported_system_prop
+    exported_system_radio_prop
+    exported_vold_prop
+    exported2_config_prop
+    exported2_default_prop
+    exported2_radio_prop
+    exported2_system_prop
+    exported2_vold_prop
+    exported3_default_prop
+    exported3_system_prop
     fs_bpf
     hal_broadcastradio_hwservice
     hal_cas_hwservice
@@ -64,6 +82,7 @@
     traced_producer_socket
     traced_tmpfs
     update_engine_log_data_file
+    vendor_default_prop
     vendor_init
     vold_prepare_subdirs
     vold_prepare_subdirs_exec