summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorInseob Kim <inseob@google.com>2024-01-11 02:31:13 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2024-01-11 02:31:13 +0000
commitf817f9b687500fba819a0f09202411801b9c9e9f (patch)
treee0b13ab74dbd3e5b08371aae6fbce4ea1383bd95
parent478449e638adfb234db436a4fb770f002ff7c4d1 (diff)
parent0c15160cad2bdaf51a6b92bea4bc1b9b1b0265fd (diff)
downloadzuma-sepolicy-f817f9b687500fba819a0f09202411801b9c9e9f.tar.gz
Label dtbo_block_device with flag-guarding am: 0c15160cad
Original change: https://android-review.googlesource.com/c/device/google/zuma-sepolicy/+/2903809 Change-Id: I0f245e7f165401304b99d07ef7c064d9d86f0a74 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--vendor/file_contexts10
-rw-r--r--vendor/update_engine.te3
2 files changed, 12 insertions, 1 deletions
diff --git a/vendor/file_contexts b/vendor/file_contexts
index c626799..4c76d68 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -71,7 +71,15 @@
/dev/block/platform/13200000\.ufs/by-name/devinfo u:object_r:devinfo_block_device:s0
/dev/block/platform/13200000\.ufs/by-name/dpm_[ab] u:object_r:custom_ab_block_device:s0
/dev/block/platform/13200000\.ufs/by-name/dram_train_[ab] u:object_r:custom_ab_block_device:s0
-/dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:custom_ab_block_device:s0
+
+is_flag_enabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, `
+ /dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:dtbo_block_device:s0
+')
+
+is_flag_disabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, `
+ /dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:custom_ab_block_device:s0
+')
+
/dev/block/platform/13200000\.ufs/by-name/frp u:object_r:frp_block_device:s0
/dev/block/platform/13200000\.ufs/by-name/gsa_bl1_[ab] u:object_r:custom_ab_block_device:s0
/dev/block/platform/13200000\.ufs/by-name/gsa_[ab] u:object_r:custom_ab_block_device:s0
diff --git a/vendor/update_engine.te b/vendor/update_engine.te
index a403d9e..d0d71bd 100644
--- a/vendor/update_engine.te
+++ b/vendor/update_engine.te
@@ -1,3 +1,6 @@
allow update_engine custom_ab_block_device:blk_file rw_file_perms;
allow update_engine modem_block_device:blk_file rw_file_perms;
allow update_engine proc_bootconfig:file r_file_perms;
+is_flag_enabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, `
+ allow update_engine dtbo_block_device:blk_file rw_file_perms;
+')