PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Allow mke2fs to format virtual block devices in microdroid"

Browse Source
This commit is contained in:
Treehugger Robot 2021-05-26 00:03:08 +00:00 committed by Gerrit Code Review
commit b8c6055b6f
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
public/e2fs.te
View File

@ -12,6 +12,15 @@ allowxperm e2fs { userdata_block_device metadata_block_device dm_device }:blk_fi
BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
};
# Allow e2fs to format /dev/block/vd*
# TODO(b/189165759) move this rule to packages/modules/Virtualization
userdebug_or_eng(`
allow e2fs vd_device:blk_file rw_file_perms;
allowxperm e2fs vd_device:blk_file ioctl {
BLKSECDISCARD BLKDISCARD BLKPBSZGET BLKDISCARDZEROES BLKROGET
};
')
allow e2fs {
proc_filesystems
proc_mounts