sepolicy: Allow bootctl hal to modify GPT on sdm710(emmc)
bootctl hal marks the current slot as bootable on every boot (if not already set); For this purpose, the hal needs GPT r/w access. Change-Id: I8c7738217e6dab58a257de654755838e7eade6e6
This commit is contained in:
		
				
					committed by
					
						
						Gerrit - the friendly Code Review server
					
				
			
			
				
	
			
			
			
						parent
						
							fd4d1e7184
						
					
				
				
					commit
					a2a6ab5817
				
			
							
								
								
									
										3
									
								
								vendor/common/hal_bootctl.te
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										3
									
								
								vendor/common/hal_bootctl.te
									
									
									
									
										vendored
									
									
								
							@@ -7,6 +7,9 @@ allow hal_bootctl block_device:dir r_dir_perms;
 | 
			
		||||
 | 
			
		||||
# Edit the attributes stored in the GPT.
 | 
			
		||||
allow hal_bootctl gpt_block_device:blk_file rw_file_perms;
 | 
			
		||||
allow hal_bootctl root_block_device:blk_file rw_file_perms;
 | 
			
		||||
 | 
			
		||||
# Allow boot_control_hal to get attributes on all the A/B partitions.
 | 
			
		||||
allow hal_bootctl boot_block_device:blk_file rw_file_perms;
 | 
			
		||||
allow hal_bootctl ab_block_device:blk_file getattr;
 | 
			
		||||
allow hal_bootctl xbl_block_device:blk_file getattr;
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user