commit dd1ec6d557e80c688f7f1e4aef522b6441e8151a
author Nick Kralevich <nnk@google.com> Fri Nov 01 10:45:03 2013 -0700
committer Nick Kralevich <nnk@google.com> Fri Nov 01 10:45:03 2013 -0700
tree 838604a9d3102017969e3efe9564b0400e4aafb5
parent 58da198a9071ca0797081579762955346621816e

Give system_server / system_app ability to write some properties

Allow writing to persist.sys and debug.

This addresses the following denials (which are actually being enforced):

<4>[  131.700473] avc:  denied  { set } for property=debug.force_rtl scontext=u:r:system_server:s0 tcontext=u:object_r:shell_prop:s0 tclass=property_service
<3>[  131.700625] init: sys_prop: permission denied uid:1000  name:debug.force_rtl
<4>[  132.630062] avc:  denied  { set } for property=persist.sys.dalvik.vm.lib scontext=u:r:system_app:s0 tcontext=u:object_r:system_prop:s0 tclass=property_service
<3>[  132.630184] init: sys_prop: permission denied uid:1000  name:persist.sys.dalvik.vm.lib

Change-Id: I5d114c0d963bf393f49f1bf13d1ed84137fbcca6

property_contexts

diff --git a/property_contexts b/property_contexts
index 6c47c9f..75c927f 100644
--- a/property_contexts
+++ b/property_contexts
@@ -26,7 +26,7 @@
 dhcp.                   u:object_r:system_prop:s0
 bluetooth.              u:object_r:bluetooth_prop:s0
 
-debug.                  u:object_r:shell_prop:s0
+debug.                  u:object_r:debug_prop:s0
 log.                    u:object_r:shell_prop:s0
 service.adb.root        u:object_r:shell_prop:s0
 service.adb.tcp.port    u:object_r:shell_prop:s0