14b6f44933
Bug: 26039641
Change-Id: Ifd96b105f054b67f881529db3fe94718cab4a0f4
(cherry picked from commit 8eaf25856e)
10 lines
314 B
Text
10 lines
314 B
Text
# update_verifier
|
|
type update_verifier, domain;
|
|
type update_verifier_exec, exec_type, file_type;
|
|
|
|
init_daemon_domain(update_verifier)
|
|
|
|
# Raw writes to bootctrl block device
|
|
allow update_verifier bootctrl_block_device:blk_file rw_file_perms;
|
|
|
|
# TODO: Add rules to allow update_verifier to read system_block_device.
|