platform_system_sepolicy/private/update_verifier.te
Akilesh Kailash abeeb42d0f Allow update_verifier to connect to snapuserd daemon
Bug: 193863442
Bug: 261913544
Test: OTA
Signed-off-by: Akilesh Kailash <akailash@google.com>
Merged-In: I10cb900466078930c9124fc381ba2adfc50ffcd4
Change-Id: I10cb900466078930c9124fc381ba2adfc50ffcd4
2023-01-09 13:19:20 -08:00

16 lines
510 B
Text

typeattribute update_verifier coredomain;
init_daemon_domain(update_verifier)
# Allow update_verifier to reboot the device.
set_prop(update_verifier, powerctl_prop)
# Allow to set the OTA related properties e.g. ota.warm_reset.
set_prop(update_verifier, ota_prop)
# allow update_verifier to connect to snapuserd daemon
allow update_verifier snapuserd_socket:sock_file write;
allow update_verifier snapuserd:unix_stream_socket connectto;
# virtual a/b properties
get_prop(update_verifier, virtual_ab_prop)