Merge "uncrypt: allow reading /proc/bootconfig"

This commit is contained in:
Treehugger Robot 2021-06-02 10:35:28 +00:00 committed by Gerrit Code Review
commit 17a5e930cb

View file

@ -32,8 +32,12 @@ allow uncrypt userdata_block_device:blk_file w_file_perms;
r_dir_file(uncrypt, rootfs)
# uncrypt reads /proc/cmdline
allow uncrypt proc_cmdline:file r_file_perms;
# Access to bootconfig is needed when calling ReadDefaultFstab.
allow uncrypt {
proc_bootconfig
proc_cmdline
}:file r_file_perms;
# Read files in /sys
r_dir_file(uncrypt, sysfs_dt_firmware_android)