Tao Bao 13c6400e11 Grant update_verifier sysfs access. ...

avc: denied { read } for pid=694 comm="update_verifier" name="block" dev="sysfs" ino=27770 scontext=u:r:update_verifier:s0 tcontext=u:object_r:sysfs:s0 tclass=dir
avc: denied { read } for pid=719 comm="update_verifier" name="name" dev="sysfs" ino=51336 scontext=u:r:update_verifier:s0 tcontext=u:object_r:sysfs:s0 tclass=file

update_verifier reads /sys/block/dm-X/dm/name to find the device-mapper
entries for system and vendor partitions.

Also remove the unneeded "block_device:dir r_dir_perms" permission.

Bug: 63146601
Test: As follows.
  a) Set up /data/ota_package/care_map.txt.
  b) Reset the slot boot-successful flag with fastboot set_active.
  c) Boot the device and check update_verifier successfully verifies
     the blocks.
Change-Id: I581136249e93ec2d4bd9ceda316590ee31148643

2017-07-06 12:04:45 -07:00

..

private

Merge changes I45a49628,Icf764bf3 into oc-dr1-dev

2017-07-06 16:11:19 +00:00

public

sepolicy: Separate system partition sepolicy and hal macros from vendor partition

2017-07-05 16:24:33 -07:00

vendor

Grant update_verifier sysfs access.

2017-07-06 12:04:45 -07:00