Merge \"update_verifier: Allow searching /dev/block.\" into nyc-mr1-dev

am: 32bcb21b Change-Id: I4bfd5bad301c8fdd6f0831aed4fa49092e822930

Merge \"update_verifier: Allow searching /dev/block.\" into nyc-mr1-dev
ca2e7fae · Tao Bao · android-build-merger · b20f3316 · 32bcb21b · ca2e7fae
Commit ca2e7fae authored 9 years ago by Tao Bao Committed by android-build-merger 9 years ago
--- a/update_verifier.te
+++ b/update_verifier.te
@@ -5,4 +5,7 @@ type update_verifier_exec, exec_type, file_type;

 init_daemon_domain(update_verifier)

+# Allow update_verifier to reach block devices in /dev/block.
+allow update_verifier block_device:dir search;
+
 # TODO: Add rules to allow update_verifier to read system_block_device.