commit f0ea953e606735e1eb62c58f11c28e572637d3a5
author Sandeep Dhavale <dhavale@google.com> Tue Nov 08 23:57:09 2022 +0000
committer Sandeep Dhavale <dhavale@google.com> Wed Nov 09 22:21:27 2022 +0000
tree 7ac8959f770bf9b5fc60fa8f21199c74138015a5
parent f4ab6c9f3c21617b5f313804d1df4a32192c573d

Fastboot AIDL Sepolicy changes

Bug: 205760652
Test: Build & flash
Change-Id: I2709c5cc2ca859481aac6fecbc99fe30a52a668b
Signed-off-by: Sandeep Dhavale <dhavale@google.com>

private/fastbootd.te

diff --git a/private/fastbootd.te b/private/fastbootd.te
index c33e044..d93ee42 100644
--- a/private/fastbootd.te
+++ b/private/fastbootd.te
@@ -45,6 +45,9 @@
 
   # Needed for reading boot properties.
   allow fastbootd proc_bootconfig:file r_file_perms;
+  # Let this domain use the hal fastboot service
+  binder_use(fastbootd)
+  hal_client_domain(fastbootd, hal_fastboot)
 ')
 
 # io_uring_setup needs ipc_lock and permission to operate anon inodes