review partition related operation

Bug: 254378739
Test: boot with no relevant avc error
Change-Id: I31ee3a7654e759fb19d90fa9ec05d493660c3741
This commit is contained in:
Adam Shih 2022-11-21 11:15:51 +08:00
parent 8cc9ed0404
commit 91f7e4c62e
6 changed files with 13 additions and 28 deletions

12
vendor/init.te vendored Normal file
View file

@ -0,0 +1,12 @@
allow init mnt_vendor_file:dir mounton;
allow init custom_ab_block_device:lnk_file relabelto;
# This is needed for chaining a boot partition vbmeta
# descriptor, where init will probe the boot partition
# to read the chained vbmeta in the first-stage, then
# relabel /dev/block/by-name/boot_[a|b] to block_device
# after loading sepolicy in the second stage.
allow init boot_block_device:lnk_file relabelto;
allow init persist_file:dir mounton;