non_plat/fastbootd.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# fastbootd (used in recovery init.rc for /sbin/fastbootd)


allow fastbootd {
    bootdevice_block_device
#    cache_block_device
#    logo_block_device
    para_block_device
  }:blk_file { rw_file_perms };

allow fastbootd {
    sysfs_boot_type
}:file { rw_file_perms };

allow fastbootd self:process setfscreate;
allow fastbootd self:capability sys_rawio;

allowxperm fastbootd {
    bootdevice_block_device
#    cache_block_device
#    logo_block_device
#    para_block_device
  }:blk_file ioctl {
      BLKSECDISCARD
      BLKDISCARD
      MMC_IOCTLCMD
  };