commit 9d34085078f90040adb2c0c520a3677cd971a2bb
author Andrew Scull <ascull@google.com> Mon Jan 24 14:33:31 2022 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Jan 24 14:33:31 2022 +0000
tree 9ed3c92a03f64734aafd6988969dfece82ff22c5
parent 0120813598113eba690bc6fefc0efa705f13622f
parent f94a38158556fc40ba76e9372346d42a8f411f69

Merge "Make the DICE HAL a bootstrap process"

microdroid/vendor/hal_dice_default.te

diff --git a/microdroid/vendor/hal_dice_default.te b/microdroid/vendor/hal_dice_default.te
index 832e717..1508427 100644
--- a/microdroid/vendor/hal_dice_default.te
+++ b/microdroid/vendor/hal_dice_default.te
@@ -3,3 +3,7 @@
 
 type hal_dice_default_exec, exec_type, vendor_file_type, file_type;
 init_daemon_domain(hal_dice_default)
+
+# hal_dice_default is using bootstrap bionic
+allow hal_dice_default system_bootstrap_lib_file:dir r_dir_perms;
+allow hal_dice_default system_bootstrap_lib_file:file { execute read open getattr map };