From 853085bd65fc4f68b4b3ad302ff575090bc41323 Mon Sep 17 00:00:00 2001
From: Kelvin Zhang <zhangkelvin@google.com>
Date: Fri, 2 Sep 2022 20:01:24 +0000
Subject: [PATCH] Fix selinux denials for fastbootd

Test: flash on O6, flash an image using git_master system + mainline
kernel
Bug: 244785938

Change-Id: I1b0e1ea0f1937abd2ad96a606b565812ee8096e1
---
 private/fastbootd.te | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/private/fastbootd.te b/private/fastbootd.te
index 2c65281a7..c33e04411 100644
--- a/private/fastbootd.te
+++ b/private/fastbootd.te
@@ -46,3 +46,8 @@ recovery_only(`
   # Needed for reading boot properties.
   allow fastbootd proc_bootconfig:file r_file_perms;
 ')
+
+# io_uring_setup needs ipc_lock and permission to operate anon inodes
+allow fastbootd self:capability ipc_lock;
+
+allow fastbootd self:anon_inode create_file_perms;