commit 434943d305075a55b1812d69fbe6c49b6280a84d
author Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> Tue Oct 29 19:30:51 2024 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Oct 29 19:30:51 2024 +0000
tree 7ccbaf04308da6ea08538fc886785fd6961272e6
parent 6a8e53d5a2112c3ceb867abd4664afe49210e78a
parent 194d712efb5915ca13e5c44dd6d6bac54333c703

Merge "sepolicy: allow fastbootd to operate devpts" into main

private/fastbootd.te

diff --git a/private/fastbootd.te b/private/fastbootd.te
index 66dd2b1..a62cc47 100644
--- a/private/fastbootd.te
+++ b/private/fastbootd.te
@@ -159,6 +159,9 @@
   allow fastbootd gsi_metadata_file_type:dir search;
   allow fastbootd ota_metadata_file:dir rw_dir_perms;
   allow fastbootd ota_metadata_file:file create_file_perms;
+
+  # Fastbootd uses liblogwrap to write mke2fs logs to kmsg, liblogwrap requires devpts.
+  allow fastbootd devpts:chr_file rw_file_perms;
 ')
 
 # This capability allows fastbootd to circumvent memlock rlimits while using