Policy for overlay_remounter
Test: Manual
Bug: 388912628
Change-Id: I9f27647f0e8d3ece229e7a46d50d54aa1f76fd76
diff --git a/private/incident.te b/private/incident.te
index db9ae86..19db7d7 100644
--- a/private/incident.te
+++ b/private/incident.te
@@ -34,4 +34,14 @@
allow incident incidentd:fifo_file write;
# only allow incident being called by shell or dumpstate
-neverallow { domain -su -shell -incident -dumpstate} incident_exec:file { execute execute_no_trans };
+neverallow {
+ domain
+ -su
+ -shell
+ -incident
+ -dumpstate
+ userdebug_or_eng(`-overlay_remounter')
+} incident_exec:file {
+ execute
+ execute_no_trans
+};