Files
device_google_wahoo/sepolicy/vendor/init.te
Jeff Vander Stoep 63013293d8 Allow init to relabel ab_block lnk_files
avc: denied { relabelto } for name="dtbo_a" dev="tmpfs"
scontext=u:r:init:s0 tcontext=u:object_r:ab_block_device:s0
tclass=lnk_file permissive=0
avc: denied { relabelto } for name="boot_a" dev="tmpfs"
scontext=u:r:init:s0 tcontext=u:object_r:boot_block_device:s0
tclass=lnk_file permissive=0

Bug: 35197529
Test: build and flash. Verify link files have correct label.
Change-Id: I2e718e8e06af70d73b0c5076ffc99d5fa7013fd9
2017-06-23 08:09:20 -07:00

17 lines
454 B
Plaintext

# symlink /sdcard to backing block
allow init tmpfs:lnk_file create;
allow init configfs:lnk_file create;
allow init firmware_file:dir mounton;
allow init configfs:file w_file_perms;
allow init debugfs_clk:file w_file_perms;
allow init tty_device:chr_file rw_file_perms;
allow init persist_file:dir mounton;
allow init ab_block_device:lnk_file relabelto;
allow init boot_block_device:lnk_file relabelto;
dontaudit init kernel:system module_request;