Skip to content
Snippets Groups Projects
Commit 280ba8b7 authored by Connor O'Brien's avatar Connor O'Brien Committed by Gerrit Code Review
Browse files

Merge "Add permissions for hal_boot"

parents a8340521 12443b7a
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
public/hal_boot.te
+ 1
− 1
View file @ 280ba8b7
# boot_control subsystem # boot_control subsystem
type hal_boot, domain; type hal_boot, domain, boot_control_hal;
type hal_boot_exec, exec_type, file_type; type hal_boot_exec, exec_type, file_type;
# hwbinder access # hwbinder access
......
public/update_engine.te
+ 4
− 0
View file @ 280ba8b7
...@@ -33,3 +33,7 @@ binder_call(update_engine, priv_app) ...@@ -33,3 +33,7 @@ binder_call(update_engine, priv_app)
# Read OTA zip file at /data/ota_package/. # Read OTA zip file at /data/ota_package/.
allow update_engine ota_package_file:file r_file_perms; allow update_engine ota_package_file:file r_file_perms;
allow update_engine ota_package_file:dir r_dir_perms; allow update_engine ota_package_file:dir r_dir_perms;
# Use binderized HAL
hwbinder_use(update_engine)
binder_call(update_engine, hal_boot)
public/update_verifier.te
+ 0
− 2
View file @ 280ba8b7
...@@ -16,5 +16,3 @@ allow update_verifier system_block_device:blk_file r_file_perms; ...@@ -16,5 +16,3 @@ allow update_verifier system_block_device:blk_file r_file_perms;
# Use binderized HAL # Use binderized HAL
hwbinder_use(update_verifier) hwbinder_use(update_verifier)
binder_call(update_verifier, hal_boot) binder_call(update_verifier, hal_boot)
allow update_verifier system_file:dir r_dir_perms;
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment