tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow fastbootd to mount /metadata in recovery." am: deef325f8f

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/1674731

Change-Id: Ie7dd9a29f2455c81b8d0fc452d670b67895f89e7
This commit is contained in:
David Anderson 2021-05-06 23:22:59 +00:00 committed by Automerger Merge Worker
commit 8b039a7b43
3 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/domain.te
View file

@ -359,7 +359,7 @@ neverallow ~{
neverallow { neverallow {
domain domain
-apexd -apexd
recovery_only(`userdebug_or_eng(`-fastbootd')') recovery_only(`-fastbootd')
-init -init
-kernel -kernel
-otapreopt_chroot -otapreopt_chroot

3
private/fastbootd.te
View file

@ -38,4 +38,7 @@ recovery_only(`
# Get fastbootd protocol property # Get fastbootd protocol property
get_prop(fastbootd, fastbootd_protocol_prop) get_prop(fastbootd, fastbootd_protocol_prop)
# Mount /metadata to interact with Virtual A/B snapshots.
allow fastbootd labeledfs:filesystem { mount unmount };
') ')

3
public/fastbootd.te
View file

@ -48,7 +48,7 @@ recovery_only(`
# libfiemap. # libfiemap.
allow fastbootd metadata_block_device:blk_file r_file_perms; allow fastbootd metadata_block_device:blk_file r_file_perms;
allow fastbootd {rootfs tmpfs}:dir mounton; allow fastbootd {rootfs tmpfs}:dir mounton;
allow fastbootd metadata_file:dir { search getattr }; allow fastbootd metadata_file:dir { search getattr mounton };
allow fastbootd gsi_metadata_file_type:dir rw_dir_perms; allow fastbootd gsi_metadata_file_type:dir rw_dir_perms;
allow fastbootd gsi_metadata_file_type:file create_file_perms; allow fastbootd gsi_metadata_file_type:file create_file_perms;
@ -97,7 +97,6 @@ recovery_only(`
vendor_file_type vendor_file_type
}:{ file lnk_file } unlink; }:{ file lnk_file } unlink;
allow fastbootd tmpfs:dir rw_dir_perms; allow fastbootd tmpfs:dir rw_dir_perms;
allow fastbootd labeledfs:filesystem { mount unmount };
# Fetch vendor_boot partition # Fetch vendor_boot partition
allow fastbootd boot_block_device:blk_file r_file_perms; allow fastbootd boot_block_device:blk_file r_file_perms;
') ')