Merge "New property to control virtual a/b user-space snapshots" am: b295d44694 am: ec750298c3 am: 328ce9cccb

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1885106

Change-Id: Ib77dd526257fa5b399adeaccd3cc412e916a36c6
diff --git a/private/property_contexts b/private/property_contexts
index d9a52b4..a537afb 100644
--- a/private/property_contexts
+++ b/private/property_contexts
@@ -294,8 +294,10 @@
 ro.virtual_ab.retrofit  u:object_r:virtual_ab_prop:s0 exact bool
 ro.virtual_ab.compression.enabled  u:object_r:virtual_ab_prop:s0 exact bool
 ro.virtual_ab.compression.xor.enabled   u:object_r:virtual_ab_prop:s0 exact bool
+ro.virtual_ab.userspace.snapshots.enabled u:object_r:virtual_ab_prop:s0 exact bool
 snapuserd.ready         u:object_r:snapuserd_prop:s0 exact bool
 snapuserd.proxy_ready   u:object_r:snapuserd_prop:s0 exact bool
+snapuserd.test.dm.snapshots u:object_r:snapuserd_prop:s0 exact bool
 
 ro.product.ab_ota_partitions u:object_r:ota_prop:s0 exact string
 # Property to set/clear the warm reset flag after an OTA update.
diff --git a/private/snapuserd.te b/private/snapuserd.te
index f24986c..e3b43a1 100644
--- a/private/snapuserd.te
+++ b/private/snapuserd.te
@@ -40,6 +40,7 @@
 
 # snapuserd.* properties
 set_prop(snapuserd, snapuserd_prop)
+get_prop(snapuserd, virtual_ab_prop)
 
 # For inotify watching for /dev/socket/snapuserd_proxy to appear.
 allow snapuserd tmpfs:dir { read watch };