commit f97026db4a2ee8d4631b78535cdae93135b2115a
author Hridya Valsaraju <hridya@google.com> Tue Sep 04 15:25:26 2018 -0700
committer Hridya Valsaraju <hridya@google.com> Wed Sep 05 13:40:30 2018 -0700
tree 955c68ad8c41ec8cef9d2e10632e24564a22e9bf
parent 7b22940511a29695974a1ffeca144eced07d890e

Allow fastbootd to wipe userdata.

This is needed for flashall -w to wipe userdata.
Bug: 113648914
Test: fastboot erase userdata

Change-Id: I7e89cf885c9a67c78de67b79ed16af7e50104bf7

public/fastbootd.te

diff --git a/public/fastbootd.te b/public/fastbootd.te
index 1d39d50..bba5ab9 100644
--- a/public/fastbootd.te
+++ b/public/fastbootd.te
@@ -44,6 +44,11 @@
 
   allow fastbootd misc_block_device:blk_file rw_file_perms;
 
+  # Required to wipe userdata
+  allow fastbootd userdata_block_device:blk_file { w_file_perms getattr ioctl };
+  allowxperm fastbootd userdata_block_device:blk_file ioctl { BLKGETSIZE64 BLKSECDISCARD
+                                                              BLKDISCARD };
+
   allow fastbootd proc_cmdline:file r_file_perms;
   allow fastbootd rootfs:dir r_dir_perms;
   allow fastbootd sysfs_dt_firmware_android:file r_file_perms;