diff options
| author | Inseob Kim <inseob@google.com> | 2024-01-10 16:36:36 +0900 |
|---|---|---|
| committer | Inseob Kim <inseob@google.com> | 2024-01-10 17:02:34 +0900 |
| commit | 0c15160cad2bdaf51a6b92bea4bc1b9b1b0265fd (patch) | |
| tree | e0b13ab74dbd3e5b08371aae6fbce4ea1383bd95 | |
| parent | f05143f43c483515a07d064522b43a58dfd1a772 (diff) | |
| download | zuma-sepolicy-simpleperf-release.tar.gz | |
Label dtbo_block_device with flag-guardingsimpleperf-release
Bug: 319035582
Test: run device assignment demo
Change-Id: I813be88391c9ff79d94e504149963160f1d74b2c
| -rw-r--r-- | vendor/file_contexts | 10 | ||||
| -rw-r--r-- | vendor/update_engine.te | 3 |
2 files changed, 12 insertions, 1 deletions
diff --git a/vendor/file_contexts b/vendor/file_contexts index c626799..4c76d68 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -71,7 +71,15 @@ /dev/block/platform/13200000\.ufs/by-name/devinfo u:object_r:devinfo_block_device:s0 /dev/block/platform/13200000\.ufs/by-name/dpm_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/13200000\.ufs/by-name/dram_train_[ab] u:object_r:custom_ab_block_device:s0 -/dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:custom_ab_block_device:s0 + +is_flag_enabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, ` + /dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:dtbo_block_device:s0 +') + +is_flag_disabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, ` + /dev/block/platform/13200000\.ufs/by-name/dtbo_[ab] u:object_r:custom_ab_block_device:s0 +') + /dev/block/platform/13200000\.ufs/by-name/frp u:object_r:frp_block_device:s0 /dev/block/platform/13200000\.ufs/by-name/gsa_bl1_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/13200000\.ufs/by-name/gsa_[ab] u:object_r:custom_ab_block_device:s0 diff --git a/vendor/update_engine.te b/vendor/update_engine.te index a403d9e..d0d71bd 100644 --- a/vendor/update_engine.te +++ b/vendor/update_engine.te @@ -1,3 +1,6 @@ allow update_engine custom_ab_block_device:blk_file rw_file_perms; allow update_engine modem_block_device:blk_file rw_file_perms; allow update_engine proc_bootconfig:file r_file_perms; +is_flag_enabled(RELEASE_AVF_ENABLE_DEVICE_ASSIGNMENT, ` + allow update_engine dtbo_block_device:blk_file rw_file_perms; +') |