commit a5d256282e42deb3644c8871187d7e080095b96a
author Yo Chiang <yochiang@google.com> Wed Aug 19 14:28:06 2020 +0800
committer Yo Chiang <yochiang@google.com> Wed Aug 19 07:56:17 2020 +0000
tree 9a82f169853735ca5e0242cc990c35a9eff7c3f2
parent f5f23b7e03864617d00d52891a3abcdc495ca6bb

Add ioctl FS_IOC_GETFLAGS access for gsid

gsid needs this to check if the underlying F2FS filesystem supports
file pinning.

Bug: 164988795
Test: Install a DSU package on CF
Test: avc denial goes away
Change-Id: Idc2456d7576cf61f6f891c082228c5143378d733

private/gsid.te

diff --git a/private/gsid.te b/private/gsid.te
index 3ff9d67..9d07adb 100644
--- a/private/gsid.te
+++ b/private/gsid.te
@@ -133,7 +133,10 @@
 allowxperm gsid {
       gsi_data_file
       ota_image_data_file
-}:file ioctl FS_IOC_FIEMAP;
+}:file ioctl {
+      FS_IOC_FIEMAP
+      FS_IOC_GETFLAGS
+};
 
 allow gsid system_server:binder call;