diff options
| author | Jidong Sun <jidong@google.com> | 2022-06-08 20:31:00 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2022-06-08 20:31:00 +0000 |
| commit | cb8342916d092bac8171ccebd687220479b81e36 (patch) | |
| tree | 4f88a55a85d8988915236b895422a7778849c702 | |
| parent | b488cabaa43723794be09e4cfb1c2146057d555b (diff) | |
| parent | f276625942b502cd5b481a8f175a79d2a755cdf6 (diff) | |
| download | gs101-sepolicy-cb8342916d092bac8171ccebd687220479b81e36.tar.gz | |
gs101: Allow BootControl to access sysfs blow_ar am: f276625942
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/18740593
Change-Id: Ieaa6dc6037b95a3a9010712b827dac316ad4e1e3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
| -rw-r--r-- | whitechapel/vendor/google/file.te | 3 | ||||
| -rw-r--r-- | whitechapel/vendor/google/genfs_contexts | 3 | ||||
| -rw-r--r-- | whitechapel/vendor/google/hal_bootctl_default.te | 1 |
3 files changed, 7 insertions, 0 deletions
diff --git a/whitechapel/vendor/google/file.te b/whitechapel/vendor/google/file.te index 673bc78..0c7a56d 100644 --- a/whitechapel/vendor/google/file.te +++ b/whitechapel/vendor/google/file.te @@ -209,3 +209,6 @@ userdebug_or_eng(` # Trusty type sysfs_trusty, sysfs_type, fs_type; + +# BootControl +type sysfs_bootctl, sysfs_type, fs_type; diff --git a/whitechapel/vendor/google/genfs_contexts b/whitechapel/vendor/google/genfs_contexts index 2e73f80..d3300e2 100644 --- a/whitechapel/vendor/google/genfs_contexts +++ b/whitechapel/vendor/google/genfs_contexts @@ -541,3 +541,6 @@ genfscon sysfs /devices/platform/25c40000.etm u:object_r:sysfs_devices_cs_etm genfscon sysfs /devices/platform/25d40000.etm u:object_r:sysfs_devices_cs_etm:s0 genfscon sysfs /devices/platform/25e40000.etm u:object_r:sysfs_devices_cs_etm:s0 genfscon sysfs /devices/platform/25f40000.etm u:object_r:sysfs_devices_cs_etm:s0 + +# BootControl +genfscon sysfs /kernel/boot_control/blow_ar u:object_r:sysfs_bootctl:s0 diff --git a/whitechapel/vendor/google/hal_bootctl_default.te b/whitechapel/vendor/google/hal_bootctl_default.te index 30db79b..a9f9cde 100644 --- a/whitechapel/vendor/google/hal_bootctl_default.te +++ b/whitechapel/vendor/google/hal_bootctl_default.te @@ -1,3 +1,4 @@ allow hal_bootctl_default sda_block_device:blk_file rw_file_perms; allow hal_bootctl_default devinfo_block_device:blk_file rw_file_perms; allow hal_bootctl_default sysfs_ota:file rw_file_perms; +allow hal_bootctl_default sysfs_bootctl:file rw_file_perms; |