tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow update_engine, recovery, and fastbootd to read snapuserd properties.

Browse source 
Bug: 193833730
Test: OTA applies and boots
Change-Id: I81c089e1763a7e25b23df245f76e04acd52a337e
This commit is contained in:
David Anderson 2021-07-27 18:51:18 -07:00
parent f595435798
commit 9e21df22d4
3 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/fastbootd.te
View file

@ -22,6 +22,7 @@ recovery_only(`
# Determine allocation scheme (whether B partitions needs to be # Determine allocation scheme (whether B partitions needs to be
# at the second half of super. # at the second half of super.
get_prop(fastbootd, virtual_ab_prop) get_prop(fastbootd, virtual_ab_prop)
get_prop(fastbootd, snapuserd_prop)
# Needed for TCP protocol # Needed for TCP protocol
allow fastbootd node:tcp_socket node_bind; allow fastbootd node:tcp_socket node_bind;

1
private/recovery.te
View file

@ -38,6 +38,7 @@ recovery_only(`
allow recovery snapuserd_socket:sock_file write; allow recovery snapuserd_socket:sock_file write;
allow recovery snapuserd:unix_stream_socket connectto; allow recovery snapuserd:unix_stream_socket connectto;
allow recovery dm_user_device:dir r_dir_perms; allow recovery dm_user_device:dir r_dir_perms;
get_prop(recovery, snapuserd_prop)
# Set fastbootd protocol property # Set fastbootd protocol property
set_prop(recovery, fastbootd_protocol_prop) set_prop(recovery, fastbootd_protocol_prop)

1
private/update_engine.te
View file

@ -24,6 +24,7 @@ binder_call(update_engine, gki_apex_prepostinstall)
# Allow to communicate with the snapuserd service, for dm-user snapshots. # Allow to communicate with the snapuserd service, for dm-user snapshots.
allow update_engine snapuserd:unix_stream_socket connectto; allow update_engine snapuserd:unix_stream_socket connectto;
allow update_engine snapuserd_socket:sock_file write; allow update_engine snapuserd_socket:sock_file write;
get_prop(update_engine, snapuserd_prop)
# Allow to communicate with apexd for calculating and reserving space for # Allow to communicate with apexd for calculating and reserving space for
# capex decompression # capex decompression