From 84e961164e269241eebf4bc78650c796c7d2e502 Mon Sep 17 00:00:00 2001 From: Joel Galenson Date: Mon, 5 Mar 2018 20:08:57 -0800 Subject: [PATCH] Grant hal_bootctl permissions for new type. Bug: 74213358 Test: Built policy. Change-Id: Icf523468e06b65095755594a8de68f42c789751c --- sepolicy/vendor/hal_bootctl.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sepolicy/vendor/hal_bootctl.te b/sepolicy/vendor/hal_bootctl.te index da24b797..e5ebb89a 100644 --- a/sepolicy/vendor/hal_bootctl.te +++ b/sepolicy/vendor/hal_bootctl.te @@ -29,3 +29,6 @@ allow hal_bootctl xbl_block_device:blk_file rw_file_perms; # Expose a socket for brokered boot message access for hal_oemlock. allow hal_bootctl hal_bootctl_socket:sock_file create_file_perms; + +allow hal_bootctl sysfs_scsi_devices_other:dir r_dir_perms; +allow hal_bootctl sysfs_scsi_devices_other:file r_file_perms;