Making sys.boot.reason.last restricted

sys.boot.reason.last needs to be readable by SysUI to correctly display the reason why authentication is required to unlock the phone. Bug: 299327097 Test: presubmit Change-Id: I9f83ade92858056609bc665ecb6ce9b93eb051e4
ProjectBlaze · Mar 28, 2024 · 83b55a3 · 83b55a3
1 parent 2b9e27c
commit 83b55a3
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/prebuilts/api/34.0/private/bootstat.te b/prebuilts/api/34.0/private/bootstat.te
@@ -17,6 +17,7 @@ neverallow {
   -dumpstate
   userdebug_or_eng(`-incidentd')
   -init
+  -platform_app
   -recovery
   -shell
   -system_server

diff --git a/prebuilts/api/34.0/private/platform_app.te b/prebuilts/api/34.0/private/platform_app.te
@@ -113,6 +113,9 @@ get_prop(platform_app, keyguard_config_prop)
 # allow platform apps to read qemu.hw.mainkeys
 get_prop(platform_app, qemu_hw_prop)
 
+# allow platform apps to read sys.boot.reason.last
+get_prop(platform_app, last_boot_reason_prop)
+
 # allow platform apps to create symbolic link
 allow platform_app app_data_file:lnk_file create_file_perms;