Allow init and vold writing misc block device.
Bug: 27176738
Change-Id: Ib52bb94973d20591dd440cea42aadfa53d476848
diff --git a/init.te b/init.te
index c8b39eb..d8ed8b8 100644
--- a/init.te
+++ b/init.te
@@ -286,6 +286,9 @@
unix_socket_connect(init, vold, vold)
+# Raw writes to misc block device
+allow init misc_block_device:blk_file w_file_perms;
+
###
### neverallow rules
###
diff --git a/vold.te b/vold.te
index 5663562..6d5d994 100644
--- a/vold.te
+++ b/vold.te
@@ -189,6 +189,9 @@
allow vold user_profile_data_file:dir create_dir_perms;
allow vold user_profile_foreign_dex_data_file:dir { getattr setattr };
+# Raw writes to misc block device
+allow vold misc_block_device:blk_file w_file_perms;
+
neverallow { domain -vold } vold_data_file:dir ~{ open create read getattr setattr search relabelto ioctl };
neverallow { domain -vold } vold_data_file:notdevfile_class_set ~{ relabelto getattr };
neverallow { domain -vold -init } vold_data_file:dir *;