commit 08a08ab21f72c38690d72b0f4209a852d20586d4
author David Anderson <dvander@google.com> Mon Jun 07 18:38:53 2021 -0700
committer David Anderson <dvander@google.com> Mon Jun 07 18:40:24 2021 -0700
tree f7d1a1da2868ae6b443923f1ac8aeaab0398f556
parent af2697a45246e336d6aadb940bbc41c79de16f93

Fix fastbootd denials when using /proc/bootconfig.

Bug: 189493387
Test: fastboot flashall on device using bootconfig
Change-Id: Ibfb7c8a2861f61803a449a4b0ec9ed92ded5c4de

private/fastbootd.te

diff --git a/private/fastbootd.te b/private/fastbootd.te
index 0174faa..40b3945 100644
--- a/private/fastbootd.te
+++ b/private/fastbootd.te
@@ -41,4 +41,7 @@
 
   # Mount /metadata to interact with Virtual A/B snapshots.
   allow fastbootd labeledfs:filesystem { mount unmount };
+
+  # Needed for reading boot properties.
+  allow fastbootd proc_bootconfig:file r_file_perms;
 ')