tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow mke2fs to format virtual block devices in microdroid" am: b8c6055b6f

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1717690

Change-Id: I800caab1d2a660771a3bff8710a2bb828facba81
This commit is contained in:
Treehugger Robot 2021-05-26 00:21:16 +00:00 committed by Automerger Merge Worker
commit 3a4ca4e4fe
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
public/e2fs.te
View file

@ -12,6 +12,15 @@ allowxperm e2fs { userdata_block_device metadata_block_device dm_device }:blk_fi
BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
};
# Allow e2fs to format /dev/block/vd*
# TODO(b/189165759) move this rule to packages/modules/Virtualization
userdebug_or_eng(`
allow e2fs vd_device:blk_file rw_file_perms;
allowxperm e2fs vd_device:blk_file ioctl {
BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
};
')
allow e2fs {
proc_filesystems
proc_mounts