diff --git a/sepolicy/private/property_contexts b/sepolicy/private/property_contexts index 2f96f9f..2ba3bca 100644 --- a/sepolicy/private/property_contexts +++ b/sepolicy/private/property_contexts @@ -1,3 +1,6 @@ # Camera persist.sns.camera_light u:object_r:sns_camera_light_prop:s0 cam.dipsavefile.enable u:object_r:sec_camera_prop:s0 + +# Product +ro.product_ship u:object_r:product_ship_prop:s0 diff --git a/sepolicy/public/property.te b/sepolicy/public/property.te index 97db1ac..854fe53 100644 --- a/sepolicy/public/property.te +++ b/sepolicy/public/property.te @@ -1,2 +1,3 @@ type sns_camera_light_prop, property_type, system_property_type, system_public_property_type; type sec_camera_prop, property_type, system_property_type, system_public_property_type; +type product_ship_prop, property_type, system_property_type, system_public_property_type; diff --git a/sepolicy/vendor/hal_hyper_default.te b/sepolicy/vendor/hal_hyper_default.te index f5fed49..1ded6dd 100644 --- a/sepolicy/vendor/hal_hyper_default.te +++ b/sepolicy/vendor/hal_hyper_default.te @@ -8,3 +8,5 @@ allow hal_hyper_default sysfs_power:file rw_file_perms; allow hal_hyper_default proc_kswapd_perftune_cpumask:file rw_file_perms; allow hal_hyper_default sysfs_ski_memory_writable:dir r_dir_perms; allow hal_hyper_default sysfs_ski_memory_writable:file rw_file_perms; + +get_prop(hal_hyper_default, product_ship_prop) diff --git a/sepolicy/vendor/hal_nfc_default.te b/sepolicy/vendor/hal_nfc_default.te new file mode 100644 index 0000000..2c9d568 --- /dev/null +++ b/sepolicy/vendor/hal_nfc_default.te @@ -0,0 +1 @@ +get_prop(hal_nfc_default, product_ship_prop) diff --git a/sepolicy/vendor/hal_proca_default.te b/sepolicy/vendor/hal_proca_default.te index 111c718..97266e0 100644 --- a/sepolicy/vendor/hal_proca_default.te +++ b/sepolicy/vendor/hal_proca_default.te @@ -2,3 +2,5 @@ type hal_proca_default, domain; type hal_proca_default_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(hal_proca_default) + +get_prop(hal_proca_default, product_ship_prop) diff --git a/sepolicy/vendor/rild.te b/sepolicy/vendor/rild.te index 39bfef3..a6b14b2 100644 --- a/sepolicy/vendor/rild.te +++ b/sepolicy/vendor/rild.te @@ -12,3 +12,5 @@ allow rild cassd:dir search; allow rild cassd:file { read getattr open }; allow rild hal_telephony_hwservice:hwservice_manager { add find }; + +get_prop(rild, product_ship_prop) diff --git a/sepolicy/vendor/tzdaemon.te b/sepolicy/vendor/tzdaemon.te index 47ef0cf..8f1c1bf 100644 --- a/sepolicy/vendor/tzdaemon.te +++ b/sepolicy/vendor/tzdaemon.te @@ -2,3 +2,5 @@ type tzdaemon, domain; type tzdaemon_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(tzdaemon) + +get_prop(tzdaemon, product_ship_prop) diff --git a/sepolicy/vendor/tztsd.te b/sepolicy/vendor/tztsd.te index 1f30ce1..a13df1d 100644 --- a/sepolicy/vendor/tztsd.te +++ b/sepolicy/vendor/tztsd.te @@ -2,3 +2,5 @@ type tztsd, domain; type tztsd_exec, exec_type, file_type, vendor_file_type; init_daemon_domain(tztsd) + +get_prop(tztsd, product_ship_prop) diff --git a/system.prop b/system.prop index 9abbc98..7c66384 100644 --- a/system.prop +++ b/system.prop @@ -55,6 +55,7 @@ ro.config.per_app_memcg=false # Misc ro.vendor.mtk_omacp_support=1 persist.vendor.mdlog.flush_log_ratio=0 +ro.product_ship=true # OEM Unlock ro.oem_unlock_supported=1