From f0f6ee205716f99e1b217fff7cb8ff003e656aa6 Mon Sep 17 00:00:00 2001
From: Tao Bao <tbao@google.com>
Date: Wed, 10 Jun 2015 15:52:49 -0700
Subject: [PATCH] Allow recovery to read files with oemfs label

The recovery and update_binary need to access the /oem partition for
devices like sprout.

Bug: 19764039
Change-Id: I3647c5d72ed708cd797968669fa1116a3ba39542
(cherry picked from commit d245789c344123a4faaab841b694c4ed5e19d18e)
---
 recovery.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/recovery.te b/recovery.te
index 29f1a50ec..1441db1fd 100644
--- a/recovery.te
+++ b/recovery.te
@@ -77,6 +77,9 @@ recovery_only(`
   allow recovery cache_file:dir create_dir_perms;
   allow recovery cache_file:file create_file_perms;
 
+  # Read files on /oem.
+  r_dir_file(recovery, oemfs);
+
   # Reboot the device
   set_prop(recovery, powerctl_prop)
 
-- 
GitLab