commit f5877aafe213ec636fbb8b14f25b6d22631cb9bb
author Kelvin Zhang <zhangkelvin@google.com> Wed Nov 08 18:40:26 2023 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Nov 08 18:40:26 2023 +0000
tree 033a338f080d969564e6f0dfc5b23ca3377cb749
parent 2ac4d112b8ce51b5a3a4ac2909087ce73753b0c1
parent f7e91113764669ce681ff5736268596c76f6d4fc

Merge "Allow update_engine to read /proc/filesystems" into main

public/update_engine.te

diff --git a/public/update_engine.te b/public/update_engine.te
index f879013..6f79902 100644
--- a/public/update_engine.te
+++ b/public/update_engine.te
@@ -73,3 +73,7 @@
 allow update_engine snapshotctl_log_data_file:dir rw_dir_perms;
 allow update_engine snapshotctl_log_data_file:file create_file_perms;
 ')
+
+# Allow determining filesystems available on system.
+# Needed for checking if overlayfs is enabled
+allow update_engine proc_filesystems:file r_file_perms;