Skip to content
Snippets Groups Projects
Commit 8e3a95e6 authored by Alex Deymo's avatar Alex Deymo
Browse files

Allow update_engine to write BCB.

update_engine can trigger a factory-reset when the update to an older
version or an incompatible version requires it.

Bug: 30810697
Bug: 28700985
TEST=Updated a device with a factory-reset required and the BCB was
written.

(cherry picked from commit 15105ce7)

Change-Id: I446e170e5dc50415ee8f5927a097b4ed730a0b8a
parent 9b03053c
No related branches found
No related tags found
No related merge requests found
...@@ -28,6 +28,11 @@ allow update_engine block_device:dir search; ...@@ -28,6 +28,11 @@ allow update_engine block_device:dir search;
allow update_engine boot_block_device:blk_file rw_file_perms; allow update_engine boot_block_device:blk_file rw_file_perms;
allow update_engine system_block_device:blk_file rw_file_perms; allow update_engine system_block_device:blk_file rw_file_perms;
# Allow to set recovery options in the BCB. Used to trigger factory reset when
# the update to an older version (channel change) or incompatible version
# requires it.
allow update_engine misc_block_device:blk_file rw_file_perms;
# Don't allow kernel module loading, just silence the logs. # Don't allow kernel module loading, just silence the logs.
dontaudit update_engine kernel:system module_request; dontaudit update_engine kernel:system module_request;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment