diff options
| author | Bart Van Assche <bvanassche@google.com> | 2021-08-13 11:34:48 -0700 |
|---|---|---|
| committer | Bart Van Assche <bvanassche@google.com> | 2021-08-13 11:35:00 -0700 |
| commit | 64e6ffc7c14c65e40ddc031770f8aef267819b6f (patch) | |
| tree | 1685a58a5186cf6a550f42302cb8015ea85281dd /sepolicy | |
| parent | 83ed7e6fb024e234782b64c916d228f54ce71921 (diff) | |
| download | poplar-64e6ffc7c14c65e40ddc031770f8aef267819b6f.tar.gz | |
Add the 'bdev_type' attribute to all block devices
The following patch iterates over all block devices:
https://android-review.googlesource.com/c/platform/system/core/+/1783847/9
The following patch grants 'init' and 'apexd' permission to iterate over
all block devices:
https://android-review.googlesource.com/c/platform/system/sepolicy/+/1783947
The above SELinux policy change requires to add the 'bdev_type'
attribute to all block devices. Hence this patch.
Bug: 194450129
Test: Untested.
Change-Id: Ibdeb66a892ded5e602c4cdead1183b087aeefc62
Signed-off-by: Bart Van Assche <bvanassche@google.com>
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/device.te | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/sepolicy/device.te b/sepolicy/device.te index dda0bf1..6d289f5 100644 --- a/sepolicy/device.te +++ b/sepolicy/device.te @@ -27,8 +27,8 @@ type hi_mce_device, dev_type; type mali_device, dev_type, file_type, mlstrustedobject; type mmz_userdev_device, dev_type; type ttyAMA2_device, dev_type; -type hi_system_block_device, dev_type; -type hi_vendor_block_device, dev_type; -type hi_cache_block_device, dev_type; -type hi_userdata_block_device, dev_type; +type hi_system_block_device, dev_type, bdev_type; +type hi_vendor_block_device, dev_type, bdev_type; +type hi_cache_block_device, dev_type, bdev_type; +type hi_userdata_block_device, dev_type, bdev_type; type rtk_bt_device, dev_type; |