platform_system_sepolicy/private/remount.te
Yi-Yo Chiang 8638a44a2d Add remount.te to allow adb remount-related operations
* init_daemon_domain because clean_scratch_files is executed by init
* gsid related plumbing for libfs_mgr_binder

Bug: 204836146
Test: Presubmit
Change-Id: Idd7eacd577f538d194252174ab1e3d8396f08fb1
2021-11-02 22:10:05 +08:00

15 lines
475 B
Text

type remount, domain, coredomain;
type remount_exec, system_file_type, exec_type, file_type;
userdebug_or_eng(`
# Allow init to run clean_scratch_files and do auto domain transfer.
init_daemon_domain(remount)
# Allow talking to gsid.
binder_use(remount)
allow remount gsi_service:service_manager find;
binder_call(remount, gsid)
# Allow searching for /metadata/gsi/remount/lp_metadata.
allow remount { metadata_file gsi_metadata_file_type }:dir search;
')