Files
device_google_wahoo/sepolicy/update_engine_common.te
Max Bires c6607276b3 Fixing denials for OTAs
denied { read } for pid=818 comm="update_engine" name="sda13"
dev="tmpfs" ino=21751 scontext=u:r:update_engine:s0
tcontext=u:object_r:ab_block_device:s0 tclass=blk_file

denied { read } for pid=818 comm="update_engine" name="sda7" dev="tmpfs"
ino=21727 scontext=u:r:update_engine:s0
tcontext=u:object_r:modem_block_device:s0 tclass=blk_file

denied { getattr } for pid=818 comm="update_engine" path="/postinstall"
dev="sda43" ino=42 scontext=u:r:update_engine:s0
tcontext=u:object_r:postinstall_mnt_dir:s0 tclass=dir

Bug: 37305560
Test: These denials are not present
Change-Id: I47bc5743c58c4c56b95614f0a170d7af16ae2b53
2017-04-17 11:39:48 -07:00

6 lines
330 B
Plaintext

# Allow update_engine and update_engine_sideload (recovery) read/write on the
# device-specific partitions it should update.
allow update_engine_common xbl_block_device:blk_file rw_file_perms;
allow update_engine_common ab_block_device:blk_file rw_file_perms;
allow update_engine_common modem_block_device:blk_file rw_file_perms;