Merge "Fix selinux denials when applying updates in recovery."

am: 0f0fbd44f9

Change-Id: I302dcd183e098bea74d1024e24942d7175fda084
This commit is contained in:
David Anderson 2019-05-23 13:46:08 -07:00 committed by android-build-merger
commit 6ae2f8fdd2

View File

@ -138,6 +138,10 @@ recovery_only(`
# This line seems suspect, as it should not really need to
# set scheduling parameters for a kernel domain task.
allow recovery kernel:process setsched;
# These are needed to update dynamic partitions in recovery.
r_dir_file(recovery, sysfs_dm)
allowxperm recovery super_block_device_type:blk_file ioctl { BLKIOMIN BLKALIGNOFF };
')
###