sepolicy/install_recovery.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

# Date : WK14.41
# Operation : Migration 
# Purpose : update recovery image
allow install_recovery bootimg_device:chr_file { open read write };
allow install_recovery recovery_device:chr_file { open read write };
allow install_recovery sysfs:file { open read write };
allow install_recovery tee_part_device:chr_file *;
allow install_recovery para_block_device:blk_file rw_file_perms;
allow install_recovery recovery_block_device:blk_file rw_file_perms;
dontaudit install_recovery system_file:file entrypoint;

# Date : WK15.13
# Operation : UT
# Purpose : Nand device policy
allow install_recovery mtd_device:dir search;
allow install_recovery mtd_device:chr_file { open read write ioctl };

# Date : WK15.32
# Operation : UT
# Purpose : M migration applypatch read boot partition and get gpt path function
allow install_recovery boot_block_device:blk_file { open read };
allow install_recovery block_device:dir { open read };