Allow update_verifier to write to kmsg
Denial message:
avc: denied { write } for pid=640 comm="update_verifier" name="kmsg"
dev="tmpfs" ino=13951 scontext=u:r:update_verifier:s0
tcontext=u:object_r:kmsg_device:s0 tclass=chr_file permissive=0
Bug: 64713327
Test: update_verifier logs successfully during boot time.
Change-Id: I421b1e6660239e5ffc624e504f5945d400510407
diff --git a/public/update_verifier.te b/public/update_verifier.te
index 4d4e1f9..6bba17b 100644
--- a/public/update_verifier.te
+++ b/public/update_verifier.te
@@ -12,6 +12,9 @@
# Read all blocks in dm wrapped system partition.
allow update_verifier dm_device:blk_file r_file_perms;
+# Write to kernel message.
+allow update_verifier kmsg_device:chr_file w_file_perms;
+
# Allow update_verifier to reboot the device.
set_prop(update_verifier, powerctl_prop)