435518d532
Add policy for bootctrl read cmdline MTK-Commit-Id: a264204afb83417dacb4f1b76e05b71509a492de Change-Id: I2bd838b67003dc13208810b4de724ca06b67067e CR-Id: ALPS03939719 Feature: A/B System Updates
10 lines
513 B
Plaintext
10 lines
513 B
Plaintext
# Add for bootctl
|
|
#============= hal_bootctl_default ==============
|
|
allow hal_bootctl_default para_block_device:blk_file { read open write};
|
|
allow hal_bootctl_default rootfs:file { read getattr open };
|
|
allow hal_bootctl_default sysfs:dir { read open };
|
|
allow hal_bootctl_default block_device:dir search;
|
|
allow hal_bootctl_default misc_sd_device:chr_file rw_file_perms;
|
|
allow hal_bootctl_default bootdevice_block_device:blk_file { read write ioctl open };
|
|
allow hal_bootctl_default proc_cmdline:file r_file_perms;
|