1system_internal_prop(hibernation_config_prop); 2system_internal_prop(hibernation_prop) 3 4# Only kernel, init, and vendor init can write to car_boot_prop properties 5neverallow { domain -kernel -init -vendor_init } car_boot_prop:property_service set; 6 7# Only allow init and carservice to set hibernation_prop 8neverallow { domain -init -carservice_app } hibernation_prop:property_service set; 9 10# never allow hibernation_config_prop to be set, should be set at build time 11neverallow { domain -init } hibernation_config_prop:property_service set; 12