diff options
| author | Nick Kralevich <nnk@google.com> | 2014-11-07 21:07:53 +0000 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2014-11-07 21:07:53 +0000 |
| commit | 4a407d5ecf7d465c0d1609777d56991c2f9608a5 (patch) | |
| tree | 66e0a50b9706fd2a0034d0728d7628ecb47c4172 | |
| parent | d92a6c16d775a40c0bf7bdf5a5f275be1e580b5c (diff) | |
| parent | 9ed758f07b0e7c358481cb55d465bd9ccd29a347 (diff) | |
| download | grouper-4a407d5ecf7d465c0d1609777d56991c2f9608a5.tar.gz | |
Allow recovery to create device nodes and modify rootfs automerge: de84e45
automerge: 9ed758f
* commit '9ed758f07b0e7c358481cb55d465bd9ccd29a347':
Allow recovery to create device nodes and modify rootfs
| -rw-r--r-- | BoardConfigCommon.mk | 1 | ||||
| -rw-r--r-- | sepolicy/recovery.te | 11 |
2 files changed, 12 insertions, 0 deletions
diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index 6f441d9..064b98b 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -96,6 +96,7 @@ BOARD_SEPOLICY_UNION += \ keystore.te \ lmkd.te \ mediaserver.te \ + recovery.te \ rild.te \ sensors_config.te \ surfaceflinger.te \ diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te new file mode 100644 index 0000000..6f20993 --- /dev/null +++ b/sepolicy/recovery.te @@ -0,0 +1,11 @@ +recovery_only(` + allow recovery ctl_rildaemon_prop:property_service set; + allow recovery device:dir rw_dir_perms; + allow recovery rootfs:dir rw_dir_perms; + allow recovery rootfs:file create_file_perms; + allow recovery sysfs_devices_system_cpu:file rw_file_perms; + allow recovery self:capability mknod; + allow recovery usbfs:dir rw_dir_perms; + allow recovery device:chr_file create_file_perms; +') + |