Merge "Add permissions for hal_boot"

am: 280ba8b7 Change-Id: I40ea119e77002f6d71a1b0125c9420c24fc54d49

Merge "Add permissions for hal_boot"
3e2fed1a · Connor O'Brien · android-build-merger · 191e8b3b · 280ba8b7 · 3e2fed1a
Commit 3e2fed1a authored 8 years ago by Connor O'Brien Committed by android-build-merger 8 years ago
--- a/public/hal_boot.te
+++ b/public/hal_boot.te
 # boot_control subsystem
-type hal_boot, domain;
+type hal_boot, domain, boot_control_hal;
 type hal_boot_exec, exec_type, file_type;

 # hwbinder access

--- a/public/update_engine.te
+++ b/public/update_engine.te
@@ -33,3 +33,7 @@ binder_call(update_engine, priv_app)
 # Read OTA zip file at /data/ota_package/.
 allow update_engine ota_package_file:file r_file_perms;
 allow update_engine ota_package_file:dir r_dir_perms;
+
+# Use binderized HAL
+hwbinder_use(update_engine)
+binder_call(update_engine, hal_boot)
--- a/public/update_verifier.te
+++ b/public/update_verifier.te
@@ -16,5 +16,3 @@ allow update_verifier system_block_device:blk_file r_file_perms;
 # Use binderized HAL
 hwbinder_use(update_verifier)
 binder_call(update_verifier, hal_boot)
-
-allow update_verifier system_file:dir r_dir_perms;