PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow BLKIOMIN and BLKALIGNOFF to super device in update_engine.

Browse Source 
These ioctls are similar to BLKGETSIZE64; they return benign information
about the partition's alignment, and are used by liblp to optimally
align dynamic partition extents.

The system_block_device is included here because on retrofit devices,
the "super" partition is mapped to the system partition.

Test: manual OTA on retrofit device
Bug: 118506262
Change-Id: I3dd3c99d86d63f97bcd393cff374e27f5ed2da2e
This commit is contained in:
Yifan Hong 2018-11-13 16:23:38 -08:00
parent 554f18163a
commit 8d32223bdc
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
public/update_engine_common.te
View File

@ -64,3 +64,12 @@ allow update_engine_common dm_device:blk_file rw_file_perms;
# read / write metadata on super device to resize partitions
allow update_engine_common super_block_device:blk_file rw_file_perms;
# ioctl on super device to get block device alignment and alignment offset
allowxperm update_engine_common {
system_block_device
super_block_device
}:blk_file ioctl { BLKIOMIN BLKALIGNOFF };
# get physical block device to map logical partitions on device mapper
allow update_engine_common block_device:dir r_dir_perms;