| commit | fd7da7b2a73c4e652ac1d90caebfa4c1e735a35a | [log] [tgz] |
|---|---|---|
| author | Tri Vo <trong@google.com> | Tue Oct 03 16:09:08 2017 -0700 |
| committer | Tri Vo <trong@google.com> | Tue Oct 03 16:46:29 2017 -0700 |
| tree | 92444722090cd8d8f96215507c0e285b30647397 | |
| parent | 2f6e66ff090bec03c0bf6124e57e2a5cb038b402 [diff] |
Move update_engine rules out of update_engine_common.te
Grant update_engine access to sysfs.
Ran fake ota go/manual-ab-ota, and this denial was fixed:
avc: denied { read } for pid=912 comm="update_engine" name="compatible"
dev="sysfs" ino=17399 scontext=u:r:update_engine:s0
tcontext=u:object_r:sysfs:s0 tclass=file permissive=0
Test: boots with no new denials
Change-Id: I8697da3af254aea1cec44d9dbb1eca18be31859c