commit b693197a34902c7d92006b2173a69d9620ee3e9f
author Treehugger Robot <treehugger-gerrit@google.com> Thu May 23 22:17:31 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu May 23 22:17:31 2019 +0000
tree 7b412d293fbecd4b02f6768653253c4e03543684
parent 0f0fbd44f9bb002c5b35f64918122a56d1d072ea
parent b192f0e7c7214db5dcabbcdb8ef377d8fe2e3638

Merge "drop "allow healthd self:process execmem;""

public/recovery.te

diff --git a/public/recovery.te b/public/recovery.te
index 12eadee..d5d16a2 100644
--- a/public/recovery.te
+++ b/public/recovery.te
@@ -138,6 +138,10 @@
   # This line seems suspect, as it should not really need to
   # set scheduling parameters for a kernel domain task.
   allow recovery kernel:process setsched;
+
+  # These are needed to update dynamic partitions in recovery.
+  r_dir_file(recovery, sysfs_dm)
+  allowxperm recovery super_block_device_type:blk_file ioctl { BLKIOMIN BLKALIGNOFF };
 ')
 
 ###