commit 74affd140396b74840e5dd8018b423ffcbe25a18
author David Anderson <dvander@google.com> Fri Oct 25 15:11:58 2019 -0700
committer David Anderson <dvander@google.com> Fri Oct 25 22:32:32 2019 +0000
tree 21b104bb4fff6c9c48f0135ce9ab4ad00b4fa279
parent 175a3170834214e0196ceaa8996b2b1c5664033f

Add fastbootd to the sys_rawio whitelist.

A similar problem was previously encountered with the boot control HAL
in bug 118011561. The HAL may need access to emmc to implement
set_active commands.

fastbootd uses the boot control HAL in passthru mode when in recovery,
so by extension, it needs this exception as well.

Bug: 140367894
Test: fastbootd can use sys_rawio
Change-Id: I1040e314a58eae8a516a2e999e9d4e2aa51786e7

private/domain.te

diff --git a/private/domain.te b/private/domain.te
index 3fc55a2..5851d75 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -321,4 +321,5 @@
   -uncrypt
   -tee
   -hal_bootctl_server
+  -fastbootd
 } self:global_capability_class_set sys_rawio;