tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix recovery denials when reading /proc/bootconfig

Browse source 
These denials were found in the logs of a test failure that entered
recovery mode.
Recovery uses libfs_mgr which reads /proc/bootconfig.

Test: Boot device into recovery and check for "avd: denied" logs
Bug: 191904998
Bug: 191737840
Ignore-AOSP-First: Merged-In not used to allow the change in prebuilts to merge
Change-Id: I96ae514cfd68856717e143d295f2838a7d0eff14
This commit is contained in:
Devin Moore 2021-06-23 13:43:42 -07:00
parent 22a1482add
commit 53c90152ea
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
prebuilts/api/31.0/private/recovery.te
View file

@ -43,4 +43,7 @@ recovery_only(`
set_prop(recovery, fastbootd_protocol_prop) set_prop(recovery, fastbootd_protocol_prop)
get_prop(recovery, recovery_config_prop) get_prop(recovery, recovery_config_prop)
# Needed to read bootconfig parameters through libfs_mgr
allow recovery proc_bootconfig:file r_file_perms;
') ')

3
private/recovery.te
View file

@ -43,4 +43,7 @@ recovery_only(`
set_prop(recovery, fastbootd_protocol_prop) set_prop(recovery, fastbootd_protocol_prop)
get_prop(recovery, recovery_config_prop) get_prop(recovery, recovery_config_prop)
# Needed to read bootconfig parameters through libfs_mgr
allow recovery proc_bootconfig:file r_file_perms;
') ')