diff --git a/private/snapshotctl.te b/private/snapshotctl.te index d07af3bf4..0f0313c9f 100644 --- a/private/snapshotctl.te +++ b/private/snapshotctl.te @@ -30,3 +30,7 @@ allow snapshotctl dm_device:chr_file rw_file_perms; # Needed to mutate device-mapper nodes. allow snapshotctl self:global_capability_class_set sys_admin; + +# Snapshotctl talk to boot control HAL to set merge status. +hwbinder_use(snapshotctl) +hal_client_domain(snapshotctl, hal_bootctl)