Jason Chiu
90a1f80488
Add hal_bootctl_default read permission to rootfs in Recovery mode
...
Fix the following avc denial:
avc: denied { read } for pid=485 comm="android.hardwar" name="bin" dev="rootfs" ino=9529 scontext=u:r:hal_bootctl_default:s0 tcontext=u:object_r:rootfs:s0 tclass=dir permissive=0
Bug: 282670401
Change-Id: I23ab086ba21d6ffea8b48b4208933c031effc4d4
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
2023-07-20 12:56:47 +00:00
Donnie Pollitz
74e0bf60c2
Allow bootctl to access trusty device
...
Background:
* Boot Control needs to be able to blow AR fuses, which requires access
to the OTP port on trusty.
Bug: 267714941
Test: AVC denial doesn't show up in log
Change-Id: I5635f2358b379ae0ffe882ca9ee162a455f554f0
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-03-28 09:58:16 +02:00
Wilson Sung
ca241fa76c
Add hal_bootctl_default write permission to devinfo_block_device
...
Bug: 270236357
Change-Id: I40219dbd726ddebb277e592353bd9f0b249dd01f
2023-02-22 11:23:32 +08:00
Wilson Sung
bab5b72f86
Add hal_bootctl related policy
...
Bug: 260522436
Bug: 264489609
Bug: 264483787
Change-Id: Iaa22899bb21ff41c1fa259830e5f49623ff8429b
2023-02-21 19:59:04 +08:00
Wilson Sung
931ea0d342
allow bootctl to read devinfo
...
Bug: 260522436
(cherry picked from commit 967da5da4f
2023-02-20 11:02:28 +00:00
