From 2fe229352bddee03740ac8382fedd040b6a9abc0 Mon Sep 17 00:00:00 2001 From: David Anderson Date: Tue, 28 Dec 2021 13:09:35 -0800 Subject: [PATCH] Fix sepolicy denial in update_engine. pvmfw is an A/B partition but is not properly labeled and update_engine gets a denial trying to write to it. Bug: N/A Test: m otapackage, apply OTA, check for denials Change-Id: I55f41a8937384d3bcda5797b5df3f34257f7a114 --- whitechapel/vendor/google/file_contexts | 1 + 1 file changed, 1 insertion(+) diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts index 241be432..e7d08435 100644 --- a/whitechapel/vendor/google/file_contexts +++ b/whitechapel/vendor/google/file_contexts @@ -68,6 +68,7 @@ /dev/block/platform/14700000\.ufs/by-name/ldfw_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/metadata u:object_r:metadata_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/pbl_[ab] u:object_r:custom_ab_block_device:s0 +/dev/block/platform/14700000\.ufs/by-name/pvmfw_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/reclaim_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/super u:object_r:super_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/tzsw_[ab] u:object_r:custom_ab_block_device:s0