commit 36c7f741c1a81565503c9536ded456deac6fb291
author Treehugger Robot <treehugger-gerrit@google.com> Thu Sep 06 21:12:07 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Sep 06 21:12:07 2018 +0000
tree 52337c9dc03c7c6d0035fb7db2e6f31c25288054
parent ac4b6478c13a11d24555f0f1d10cd8c098b7586d
parent f97026db4a2ee8d4631b78535cdae93135b2115a

Merge "Allow fastbootd to wipe userdata."

public/fastbootd.te

diff --git a/public/fastbootd.te b/public/fastbootd.te
index 1d39d50..bba5ab9 100644
--- a/public/fastbootd.te
+++ b/public/fastbootd.te
@@ -44,6 +44,11 @@
 
   allow fastbootd misc_block_device:blk_file rw_file_perms;
 
+  # Required to wipe userdata
+  allow fastbootd userdata_block_device:blk_file { w_file_perms getattr ioctl };
+  allowxperm fastbootd userdata_block_device:blk_file ioctl { BLKGETSIZE64 BLKSECDISCARD
+                                                              BLKDISCARD };
+
   allow fastbootd proc_cmdline:file r_file_perms;
   allow fastbootd rootfs:dir r_dir_perms;
   allow fastbootd sysfs_dt_firmware_android:file r_file_perms;