diff options
Diffstat (limited to 'private/init.te')
-rw-r--r-- | private/init.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/private/init.te b/private/init.te index f569e0c2d..200780dfb 100644 --- a/private/init.te +++ b/private/init.te @@ -92,6 +92,9 @@ neverallow { domain -init } vts_status_prop:property_service set; # Only init can write normal ro.boot. properties neverallow { domain -init } bootloader_prop:property_service set; +# Only init can write ro.boot.hypervisor properties +neverallow { domain -init } hypervisor_prop:property_service set; + # Only init can write hal.instrumentation.enable neverallow { domain -init } hal_instrumentation_prop:property_service set; |