diff --git a/sepolicy/bluejay/file_contexts b/sepolicy/bluejay/file_contexts index a273c79..c3e78a4 100644 --- a/sepolicy/bluejay/file_contexts +++ b/sepolicy/bluejay/file_contexts @@ -1,5 +1,3 @@ -# Binaries -/vendor/bin/ufs_firmware_update\.sh u:object_r:ufs_firmware_update_exec:s0 - # Devices /dev/block/platform/14700000\.ufs/by-name/fips u:object_r:fips_block_device:s0 + diff --git a/sepolicy/bluejay/ufs_firmware_update.te b/sepolicy/bluejay/ufs_firmware_update.te index 53ceba5..f0b801f 100644 --- a/sepolicy/bluejay/ufs_firmware_update.te +++ b/sepolicy/bluejay/ufs_firmware_update.te @@ -1,10 +1,10 @@ -type ufs_firmware_update, domain; -type ufs_firmware_update_exec, vendor_file_type, exec_type, file_type; - +# Storage firmware upgrade init_daemon_domain(ufs_firmware_update) +# ufs FFU allow ufs_firmware_update vendor_toolbox_exec:file execute_no_trans; allow ufs_firmware_update block_device:dir r_dir_perms; allow ufs_firmware_update fips_block_device:blk_file rw_file_perms; allow ufs_firmware_update sysfs:dir r_dir_perms; allow ufs_firmware_update sysfs_scsi_devices_0000:file r_file_perms; +