tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow fastbootd to mount /metadata in recovery."

Browse source
This commit is contained in:
David Anderson 2021-05-06 17:34:08 +00:00 committed by Gerrit Code Review
commit deef325f8f
3 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/domain.te
View file

@ -359,7 +359,7 @@ neverallow ~{
neverallow {
domain
-apexd
recovery_only(`userdebug_or_eng(`-fastbootd')')
recovery_only(`-fastbootd')
-init
-kernel
-otapreopt_chroot

3
private/fastbootd.te
View file

@ -38,4 +38,7 @@ recovery_only(`
# Get fastbootd protocol property
get_prop(fastbootd, fastbootd_protocol_prop)
# Mount /metadata to interact with Virtual A/B snapshots.
allow fastbootd labeledfs:filesystem { mount unmount };
')

3
public/fastbootd.te
View file

@ -48,7 +48,7 @@ recovery_only(`
# libfiemap.
allow fastbootd metadata_block_device:blk_file r_file_perms;
allow fastbootd {rootfs tmpfs}:dir mounton;
allow fastbootd metadata_file:dir { search getattr };
allow fastbootd metadata_file:dir { search getattr mounton };
allow fastbootd gsi_metadata_file_type:dir rw_dir_perms;
allow fastbootd gsi_metadata_file_type:file create_file_perms;
@ -97,7 +97,6 @@ recovery_only(`
vendor_file_type
}:{ file lnk_file } unlink;
allow fastbootd tmpfs:dir rw_dir_perms;
allow fastbootd labeledfs:filesystem { mount unmount };
# Fetch vendor_boot partition
allow fastbootd boot_block_device:blk_file r_file_perms;
')