diff --git a/non_plat/fastbootd.te b/non_plat/fastbootd.te index 9e273ab..0a48fbd 100644 --- a/non_plat/fastbootd.te +++ b/non_plat/fastbootd.te @@ -1,25 +1,28 @@ # fastbootd (used in recovery init.rc for /sbin/fastbootd) -#allow fastbootd { -# bootdevice_block_device +allow fastbootd { + bootdevice_block_device +# cache_block_device +# logo_block_device + para_block_device + }:blk_file { rw_file_perms }; + +allow fastbootd { + sysfs_boot_type +}:file { rw_file_perms }; + +allow fastbootd self:process setfscreate; +allow fastbootd self:capability sys_rawio; + +allowxperm fastbootd { + bootdevice_block_device # cache_block_device # logo_block_device # para_block_device -# }:blk_file { rw_file_perms }; - -#allow fastbootd { -# sysfs_boot_type -#}:file { rw_file_perms }; - -#allowxperm fastbootd { -# bootdevice_block_device -# cache_block_device -# logo_block_device -# para_block_device -# }:blk_file ioctl { -# BLKSECDISCARD -# BLKDISCARD -# MMC_IOCTLCMD -# }; + }:blk_file ioctl { + BLKSECDISCARD + BLKDISCARD + MMC_IOCTLCMD + };