Allow ueventd to relabel block devices
There is a race in ueventd's coldboot procedure that permits creation
of device block nodes before platform devices are registered. In this case
the device node links used to compute the SELinux context are not known
and the node is created under the generic context: u:object_r:block_device:s0.
Ueventd has been patched to relabel the nodes on subsequent add events but
it needs permissions to be allowed to do it.
BUG=28388946
Signed-off-by: Mihai Serban <mihai.serban@intel.com>
(cherry picked from commit d41ad551189c1b7be26a1807980418858b2a132e)
Change-Id: I26838a3a9bc19b341e7176e5dc614827232014bf
2 files changed