update_verifier: read dir perms
Allow update_verifier to load the boot_control_hal in passthrough mode.
Test: update_verifier works, no denials
Bug: 34656553
Change-Id: I5c20ce67c8f1fd195f2429dae497221514ed95a8
diff --git a/public/update_verifier.te b/public/update_verifier.te
index abbc766..5ee5258 100644
--- a/public/update_verifier.te
+++ b/public/update_verifier.te
@@ -3,6 +3,9 @@
type update_verifier, domain, boot_control_hal;
type update_verifier_exec, exec_type, file_type;
+# find the boot_control_hal
+allow update_verifier system_file:dir r_dir_perms;
+
# Allow update_verifier to reach block devices in /dev/block.
allow update_verifier block_device:dir search;