tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: allow recovery to operate devpts and kmsg"

Browse source
This commit is contained in:
Treehugger Robot 2021-06-24 01:33:52 +00:00 committed by Gerrit Code Review
commit 097a8b4e29
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
public/recovery.te Normal file → Executable file
View file

@ -133,6 +133,10 @@ recovery_only(`
# Allow mounting /metadata for writing update states # Allow mounting /metadata for writing update states
allow recovery metadata_file:dir { getattr mounton }; allow recovery metadata_file:dir { getattr mounton };
# Recovery uses liblogwrap to write fsck logs to kmsg, liblogwrap requires devpts.
allow recovery devpts:chr_file rw_file_perms;
allow recovery kmsg_device:chr_file { getattr w_file_perms };
') ')
### ###