diff options
| author | Jeff Vander Stoep <jeffv@google.com> | 2017-07-20 16:55:06 -0700 |
|---|---|---|
| committer | Cosme Domínguez Díaz <cosme.ddiaz@gmail.com> | 2018-03-29 22:27:23 +0200 |
| commit | 06923403402cbc29c97e750a1b954397a8a719ba (patch) | |
| tree | 6fea8d7a513a55917df38db2613a80c97307728c | |
| parent | 348285c104b42b39c7692b5329372e0ca9dc40e5 (diff) | |
label persist partition and grant e2fsck access
persist partition is mounted rw so it should be checked for errors.
Bug: 63874026
Test: build and flash, verify persist is correctly labeled and no
denials in the log.
Change-Id: I9bb57b5ed20bda0f6937d506bf9b9630365abd87
| -rw-r--r-- | sepolicy/file_contexts | 6 | ||||
| -rw-r--r-- | sepolicy/fsck.te | 4 |
2 files changed, 5 insertions, 5 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 1e8efa3..87c04a0 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -22,9 +22,9 @@ /vendor/bin/hw/android\.hardware\.light@2\.0-service.zuk_8996 u:object_r:hal_light_default_exec:s0 # persist -/dev/block/mmcblk0p40 u:object_r:persist_block_device:s0 -/persist/rfs(/.*)? u:object_r:rfs_file:s0 -/persist/sensors/gyro_sensitity_cal u:object_r:sensors_persist_file:s0 +/dev/block/platform/soc/(624000\.ufshc|7464900\.sdhci)/by-name/persist u:object_r:persist_block_device:s0 +/persist/rfs(/.*)? u:object_r:rfs_file:s0 +/persist/sensors/gyro_sensitity_cal u:object_r:sensors_persist_file:s0 # readmac /vendor/bin/readmac u:object_r:readmac_exec:s0 diff --git a/sepolicy/fsck.te b/sepolicy/fsck.te index e1e0bb9..9c64f10 100644 --- a/sepolicy/fsck.te +++ b/sepolicy/fsck.te @@ -1,2 +1,2 @@ -allow fsck rootfs:lnk_file getattr; -allow fsck persist_block_device:blk_file { read open write ioctl }; +allow fsck persist_block_device:blk_file rw_file_perms; + |