device_google_gs201/whitechapel_pro/fastbootd.te
Chungjui Fan e02f501377 sepolicy: allow fastbootd to access gsc device node
audit: type=1400 audit(1646614793.912:8): avc:  denied  { getattr }
for pid=347 comm="fastbootd" path="/dev/gsc0" dev="tmpfs" ino=469
scontext=u:r:fastbootd:s0 tcontext=u:object_r:citadel_device:s0
tclass=chr_file permissive=0

Bug: 221410358
Test: fastboot -w in fastbootd mode
Change-Id: I5680515865c2656ffa91dfe593459aab1ade81cb
Signed-off-by: Chungjui Fan <chungjuifan@google.com>
2022-03-14 04:47:31 +00:00

7 lines
302 B
Text

# Required by the bootcontrol HAL for the 'set_active' command.
recovery_only(`
allow fastbootd devinfo_block_device:blk_file rw_file_perms;
allow fastbootd sda_block_device:blk_file rw_file_perms;
allow fastbootd sysfs_ota:file rw_file_perms;
allow fastbootd citadel_device:chr_file rw_file_perms;
')