From ac44b340d35296831f1ab482f24130f5ef525384 Mon Sep 17 00:00:00 2001 From: Devin Moore Date: Tue, 1 Mar 2022 18:15:33 +0000 Subject: [PATCH] Add the init_boot partition sepolicy Tagging the partition as a boot_block_device so everything that had permission to read/write to the boot partition now also has permissions for this new init_boot partition. This is required for update_engine to be able to write to init_boot on builds that are enforcing sepolicy. Bug: 222052598 Test: adb shell setenforce 1 && update_device.py ota.zip Merged-In: Ic991fa314c8a6fdb848199a626852a68a57d1df5 Change-Id: Ic991fa314c8a6fdb848199a626852a68a57d1df5 --- whitechapel_pro/file_contexts | 1 + 1 file changed, 1 insertion(+) diff --git a/whitechapel_pro/file_contexts b/whitechapel_pro/file_contexts index 5ad46436..f86fa5f1 100644 --- a/whitechapel_pro/file_contexts +++ b/whitechapel_pro/file_contexts @@ -159,6 +159,7 @@ /dev/block/platform/14700000\.ufs/by-name/bl2_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/bl31_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/boot_[ab] u:object_r:boot_block_device:s0 +/dev/block/platform/14700000\.ufs/by-name/init_boot_[ab] u:object_r:boot_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/devinfo u:object_r:devinfo_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/dpm_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/14700000\.ufs/by-name/dram_train_[ab] u:object_r:custom_ab_block_device:s0