Merge "Fix selinux denials when applying updates in recovery."

2019-05-23 20:15:45 +00:00 · 2019-05-23 20:15:45 +00:00 · 0f0fbd44f9
commit 0f0fbd44f9
parent 7c3f77da18 d431c2bfe5
1 changed files with 4 additions and 0 deletions
--- a/public/recovery.te
+++ b/public/recovery.te
@ -138,6 +138,10 @@ recovery_only(`
  # This line seems suspect, as it should not really need to
  # set scheduling parameters for a kernel domain task.
  allow recovery kernel:process setsched;
+
+  # These are needed to update dynamic partitions in recovery.
+  r_dir_file(recovery, sysfs_dm)
+  allowxperm recovery super_block_device_type:blk_file ioctl { BLKIOMIN BLKALIGNOFF };
 ')

 ###