summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-07-22 01:07:45 +0000
committerAndroid Build Coastguard Worker <android-build-coastguard-worker@google.com>2023-07-22 01:07:45 +0000
commit883ea98a1509578d4045869bd0551eae478772f8 (patch)
treecb4ea47cb2b9998d5f619bb1519b34dfe08d5212
parenta55496243bf59d37c742eab252c5959f4f7a3755 (diff)
parent7aa9a5e3c059b41dbe2fe557632275063901353d (diff)
downloadzuma-sepolicy-883ea98a1509578d4045869bd0551eae478772f8.tar.gz
Snap for 10542431 from 7aa9a5e3c059b41dbe2fe557632275063901353d to udc-qpr1-release
Change-Id: I6988e04123e8eec15a423af916f99e5155dd490d
-rw-r--r--vendor/file_contexts2
-rw-r--r--vendor/hal_bootctl_default.te4
2 files changed, 5 insertions, 1 deletions
diff --git a/vendor/file_contexts b/vendor/file_contexts
index 06227cd..765d161 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -1,6 +1,6 @@
# Binaries
/vendor/bin/hw/android\.hardware\.health-service\.zuma u:object_r:hal_health_default_exec:s0
-/vendor/bin/hw/android\.hardware\.boot@1\.2-service-zuma u:object_r:hal_bootctl_default_exec:s0
+/vendor/bin/hw/android\.hardware\.boot-service\.default-zuma u:object_r:hal_bootctl_default_exec:s0
/vendor/bin/hw/android\.hardware\.gxp\.logging@service-gxp-logging u:object_r:gxp_logging_exec:s0
/vendor/bin/hw/android\.hardware\.power\.stats-service\.pixel u:object_r:hal_power_stats_default_exec:s0
/vendor/bin/hw/android\.hardware\.secure_element-service\.thales u:object_r:hal_secure_element_st54spi_aidl_exec:s0
diff --git a/vendor/hal_bootctl_default.te b/vendor/hal_bootctl_default.te
index 2db4651..2ffeb27 100644
--- a/vendor/hal_bootctl_default.te
+++ b/vendor/hal_bootctl_default.te
@@ -2,3 +2,7 @@ allow hal_bootctl_default devinfo_block_device:blk_file rw_file_perms;
allow hal_bootctl_default sda_block_device:blk_file rw_file_perms;
allow hal_bootctl_default sysfs_ota:file rw_file_perms;
allow hal_bootctl_default tee_device:chr_file rw_file_perms;
+
+recovery_only(`
+ allow hal_bootctl_default rootfs:dir r_dir_perms;
+')