update_engine_common: allow BLKROGET and BLKROSET am: eacbcc980f
am: 4e1f08b0bc
Change-Id: Icd0f740232537e314c8314a8e0a55091a0ad0f74
diff --git a/public/update_engine_common.te b/public/update_engine_common.te
index 819b7a3..a7d3bf3 100644
--- a/public/update_engine_common.te
+++ b/public/update_engine_common.te
@@ -7,6 +7,7 @@
# Allow read/write on system and boot partitions.
allow update_engine_common boot_block_device:blk_file rw_file_perms;
allow update_engine_common system_block_device:blk_file rw_file_perms;
+allowxperm update_engine_common { boot_block_device system_block_device }:blk_file ioctl { BLKROGET BLKROSET };
# Allow to set recovery options in the BCB. Used to trigger factory reset when
# the update to an older version (channel change) or incompatible version