Tao Bao 13c6400e11 Grant update_verifier sysfs access.
avc: denied { read } for pid=694 comm="update_verifier" name="block" dev="sysfs" ino=27770 scontext=u:r:update_verifier:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
avc: denied { read } for pid=719 comm="update_verifier" name="name" dev="sysfs" ino=51336 scontext=u:r:update_verifier:s0 tcontext=u:object_r:sysfs:s0 tclass=file

update_verifier reads /sys/block/dm-X/dm/name to find the device-mapper
entries for system and vendor partitions.

Also remove the unneeded "block_device:dir r_dir_perms" permission.

Bug: 63146601
Test: As follows.
  a) Set up /data/ota_package/care_map.txt.
  b) Reset the slot boot-successful flag with fastboot set_active.
  c) Boot the device and check update_verifier successfully verifies
     the blocks.
Change-Id: I581136249e93ec2d4bd9ceda316590ee31148643
2017-07-06 12:04:45 -07:00
2017-03-28 22:43:32 +00:00
2017-07-05 11:17:31 +08:00
2017-04-21 11:21:57 -07:00
2017-04-26 21:09:10 +00:00
2017-07-05 11:17:31 +08:00
2017-05-25 11:40:24 -07:00
2017-04-19 18:29:26 -07:00
2017-03-21 10:28:34 -07:00
2017-06-29 18:18:19 -07:00
Description
No description provided
4.4 MiB
Languages
C++ 54.8%
Makefile 33.2%
C 5.5%
Shell 4.6%
Python 1.3%
Other 0.6%