Skip to content
Snippets Groups Projects
Commit e957228e authored by Tianjie Xu's avatar Tianjie Xu Committed by android-build-merger
Browse files

Merge \"Add sepolicy for update_verifier\" into nyc-mr1-dev

am: b4c824b9

Change-Id: I3891d32a81a255b4864040d764e81e631a1f0de7
parents f03acfdf b4c824b9
Branches
Tags
No related merge requests found
......@@ -8,4 +8,10 @@ init_daemon_domain(update_verifier)
# Allow update_verifier to reach block devices in /dev/block.
allow update_verifier block_device:dir search;
# TODO: Add rules to allow update_verifier to read system_block_device.
# Read care map in /data/ota_package/.
allow update_verifier ota_package_file:dir r_dir_perms;
allow update_verifier ota_package_file:file r_file_perms;
# Read all blocks in system partition.
allow update_verifier system_block_device:blk_file r_file_perms;
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment