Merge "Allow gsid to read dm nodes from sysfs."

am: 4afae94836

Change-Id: If61d1504843a0ea09372830801dde9f6706934f8
This commit is contained in:
David Anderson 2019-06-12 14:27:24 -07:00 committed by android-build-merger
commit 0524b03d8d

View file

@ -20,7 +20,7 @@ dontaudit gsid self:global_capability_class_set dac_override;
# libfiemap_writer uses sysfs to derive the bottom of a device-mapper stacking.
# This requires traversing /sys/block/dm-N/slaves/* and reading the list of
# file names.
allow gsid sysfs_dm:dir r_dir_perms;
r_dir_file(gsid, sysfs_dm)
# Needed to read fstab, which is used to validate that system verity does not
# use check_once_at_most for sdcard installs. (Note: proc_cmdline is needed