platform_system_sepolicy/private/compat/27.0/27.0.compat.cil

(typeattribute vendordomain)
(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))
(allowx vendordomain dev_type (ioctl blk_file ((range 0x0000 0xffff))))
(allowx vendordomain file_type (ioctl file ((range 0x0000 0xffff))))
Add mechanism for granting permissions to old vendor images This addresses Treble backwards compat issues introduced in aosp/793958 and aosp/783669. Bug: 122874820 Test: build/flash blueline with pi-dev vendor and generic_ab system images. Test: adb pull /sys/fs/selinux/policy; sesearch policy --allowx -s vendordomain -t dev_type Change-Id: Ic2b304472bb88051e03740dc387834056aba641a 2019-05-02 22:48:44 +02:00			`(typeattribute vendordomain)`
			`(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))`
			`(allowx vendordomain dev_type (ioctl blk_file ((range 0x0000 0xffff))))`
			`(allowx vendordomain file_type (ioctl file ((range 0x0000 0xffff))))`