allow bootctl to access devinfo

[   22.798274] type=1400 audit(1616580486.404:10): avc:
denied { write } for comm="boot@1.2-servic" name="sdd1"
dev="tmpfs" ino=705 scontext=u:r:hal_bootctl_default:s0
tcontext=u:object_r:devinfo_block_device:s0 tclass=blk_file
permissive=1
Bug: 177882574
Test: boot to home after factory reset
Change-Id: I6774ffd46a74c75b2fee962757901ea97e9033fe
This commit is contained in:
Adam Shih 2021-03-24 18:11:37 +08:00
parent 3a27f85dc8
commit 5b5a004593

View file

@ -1,3 +1,3 @@
allow hal_bootctl_default sda_block_device:blk_file rw_file_perms; allow hal_bootctl_default sda_block_device:blk_file rw_file_perms;
allow hal_bootctl_default devinfo_block_device:blk_file r_file_perms; allow hal_bootctl_default devinfo_block_device:blk_file rw_file_perms;
allow hal_bootctl_default sysfs_ota:file rw_file_perms; allow hal_bootctl_default sysfs_ota:file rw_file_perms;