summaryrefslogtreecommitdiffstats
path: root/common
diff options
context:
space:
mode:
authorNolen Johnson <johnsonnolen@gmail.com>2019-07-30 20:37:05 +0000
committerNolen Johnson <johnsonnolen@gmail.com>2019-07-30 20:37:05 +0000
commit7125675e69f6b6970400f4feffafe30331ff253e (patch)
treea78889197be9a4a10d6b9c16bfbac3a10b362bc5 /common
parentac26bd2fa798ebc47e92733532d7a05741247b66 (diff)
downloadandroid_device_lineage_sepolicy-7125675e69f6b6970400f4feffafe30331ff253e.tar.gz
android_device_lineage_sepolicy-7125675e69f6b6970400f4feffafe30331ff253e.tar.bz2
android_device_lineage_sepolicy-7125675e69f6b6970400f4feffafe30331ff253e.zip
lineage: Guard neverallowed policy for system_file with userdebug/eng
Change-Id: I8761fd7737126dab7cf0748d3f9f46fcd83c660f
Diffstat (limited to 'common')
-rw-r--r--common/private/recovery.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 6e5e33a..9a9d7cd 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -31,7 +31,9 @@ allow recovery self:process setexec;
domain_trans(recovery, otapreopt_chroot_exec, backuptool)
# Some addons require this for A/B installation compatibility
+userdebug_or_eng(`
allow recovery system_file:dir mounton;
+')
# Volume manager
allow recovery block_device:dir create_dir_perms;