commit 853085bd65fc4f68b4b3ad302ff575090bc41323
author Kelvin Zhang <zhangkelvin@google.com> Fri Sep 02 20:01:24 2022 +0000
committer Kelvin Zhang <zhangkelvin@google.com> Mon Sep 05 17:41:07 2022 +0000
tree cb77c9dc2e9c06a0428b36a76c68e44efcacab87
parent 455ae8adca13b1f3da03a1c5eb9d3b66d1691286

Fix selinux denials for fastbootd

Test: flash on O6, flash an image using git_master system + mainline
kernel
Bug: 244785938

Change-Id: I1b0e1ea0f1937abd2ad96a606b565812ee8096e1

private/fastbootd.te

diff --git a/private/fastbootd.te b/private/fastbootd.te
index 2c65281..c33e044 100644
--- a/private/fastbootd.te
+++ b/private/fastbootd.te
@@ -46,3 +46,8 @@
   # Needed for reading boot properties.
   allow fastbootd proc_bootconfig:file r_file_perms;
 ')
+
+# io_uring_setup needs ipc_lock and permission to operate anon inodes
+allow fastbootd self:capability ipc_lock;
+
+allow fastbootd self:anon_inode create_file_perms;