Merge "update_engine: allow to r/w super partition metadata"

This commit is contained in:
Yifan Hong 2018-09-28 23:03:47 +00:00 committed by Gerrit Code Review
commit 289132e355

View file

@ -43,3 +43,12 @@ allow update_engine_common proc_cmdline:file r_file_perms;
# Read files in /sys/firmware/devicetree/base/firmware/android/
r_dir_file(update_engine_common, sysfs_dt_firmware_android)
# read / write on /dev/device-mapper to map / unmap devices
allow update_engine_common dm_device:chr_file rw_file_perms;
# apply / verify updates on devices mapped via device mapper
allow update_engine_common dm_device:blk_file rw_file_perms;
# read / write metadata on super device to resize partitions
allow update_engine_common super_block_device:blk_file rw_file_perms;