commit ac45700478a6928adf01bfc35c90cee1190795cc
author Treehugger Robot <treehugger-gerrit@google.com> Thu Sep 06 22:41:19 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Sep 06 22:41:19 2018 +0000
tree 5f9364fa01834bbb71be42f6ce36c4575faf0cf7
parent 36c7f741c1a81565503c9536ded456deac6fb291
parent eef72d34b4e68470ef65b5307a3a657985dd6b12

Merge "dumpstate: remove JIT and /data execute"

public/fastbootd.te

diff --git a/public/fastbootd.te b/public/fastbootd.te
index 1d39d50..bba5ab9 100644
--- a/public/fastbootd.te
+++ b/public/fastbootd.te
@@ -44,6 +44,11 @@
 
   allow fastbootd misc_block_device:blk_file rw_file_perms;
 
+  # Required to wipe userdata
+  allow fastbootd userdata_block_device:blk_file { w_file_perms getattr ioctl };
+  allowxperm fastbootd userdata_block_device:blk_file ioctl { BLKGETSIZE64 BLKSECDISCARD
+                                                              BLKDISCARD };
+
   allow fastbootd proc_cmdline:file r_file_perms;
   allow fastbootd rootfs:dir r_dir_perms;
   allow fastbootd sysfs_dt_firmware_android:file r_file_perms;