Skip to content
Snippets Groups Projects
Commit e1df5103 authored by Connor O'Brien's avatar Connor O'Brien Committed by Gerrit Code Review
Browse files

Merge "Move boot_control_hal attribute to hal_boot domain"

parents c9630dc6 1f329465
No related branches found
No related tags found
No related merge requests found
# boot_control subsystem # boot_control subsystem
type hal_boot, domain; type hal_boot, domain, boot_control_hal;
type hal_boot_exec, exec_type, file_type; type hal_boot_exec, exec_type, file_type;
# hwbinder access # hwbinder access
......
# Domain for update_engine daemon. # Domain for update_engine daemon.
# update_engine uses the boot_control_hal. type update_engine, domain, domain_deprecated, update_engine_common;
type update_engine, domain, domain_deprecated, update_engine_common, boot_control_hal;
type update_engine_exec, exec_type, file_type; type update_engine_exec, exec_type, file_type;
type update_engine_data_file, file_type, data_file_type; type update_engine_data_file, file_type, data_file_type;
...@@ -33,3 +32,7 @@ binder_call(update_engine, priv_app) ...@@ -33,3 +32,7 @@ binder_call(update_engine, priv_app)
# Read OTA zip file at /data/ota_package/. # Read OTA zip file at /data/ota_package/.
allow update_engine ota_package_file:file r_file_perms; allow update_engine ota_package_file:file r_file_perms;
allow update_engine ota_package_file:dir r_dir_perms; allow update_engine ota_package_file:dir r_dir_perms;
# Use binderized boot HAL.
hwbinder_use(update_engine)
binder_call(update_engine, hal_boot)
# update_verifier # update_verifier
# update_verifier uses the boot_control_hal. type update_verifier, domain;
type update_verifier, domain, boot_control_hal;
type update_verifier_exec, exec_type, file_type; type update_verifier_exec, exec_type, file_type;
# Allow update_verifier to reach block devices in /dev/block. # Allow update_verifier to reach block devices in /dev/block.
...@@ -13,8 +12,7 @@ allow update_verifier ota_package_file:file r_file_perms; ...@@ -13,8 +12,7 @@ allow update_verifier ota_package_file:file r_file_perms;
# Read all blocks in system partition. # Read all blocks in system partition.
allow update_verifier system_block_device:blk_file r_file_perms; allow update_verifier system_block_device:blk_file r_file_perms;
# Use binderized HAL # Use binderized boot HAL.
hwbinder_use(update_verifier) hwbinder_use(update_verifier)
binder_call(update_verifier, hal_boot) binder_call(update_verifier, hal_boot)
allow update_verifier system_file:dir r_dir_perms;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment