summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAmeya Thakur <ameyat@codeaurora.org>2016-09-22 16:26:35 -0700
committerGerrit - the friendly Code Review server <code-review@localhost>2016-09-26 13:30:45 -0700
commit992e1f7060bd2373afd1bc342b7d657f99362390 (patch)
treebc44db6295e553cdcaa50ebad2d8c38d8d42811b
parent0957aade1f9fa3359ad79009c139ca1ef00a7ecc (diff)
downloadandroid_device_qcom_sepolicy-992e1f7060bd2373afd1bc342b7d657f99362390.tar.gz
android_device_qcom_sepolicy-992e1f7060bd2373afd1bc342b7d657f99362390.tar.bz2
android_device_qcom_sepolicy-992e1f7060bd2373afd1bc342b7d657f99362390.zip
msmcobalt: file_context: Add file context for non-hlos mount points
The non-hlos mount points(/firmware and /bt_firmware) are now built as a part of the image rather than being created on the fly. Adding the labels for both of them here. Also added a rule to allow init to mount the non-hlos partitions on the same. Change-Id: Idb2bf7cb3894421ef78354cb965e7fbb77627172
-rw-r--r--common/init.te4
-rw-r--r--msmcobalt/file_contexts5
2 files changed, 9 insertions, 0 deletions
diff --git a/common/init.te b/common/init.te
index 02d804cd..6cde24b0 100644
--- a/common/init.te
+++ b/common/init.te
@@ -27,3 +27,7 @@ allow init { domain -lmkd }:process noatsecure;
allow init configfs:dir r_dir_perms;
allow init configfs:file { rw_file_perms link };
allow init configfs:lnk_file create_file_perms;
+
+#Allow init to mount non-hlos partitions in A/B builds
+allow init firmware_file:dir { mounton };
+allow init bt_firmware_file:dir { mounton };
diff --git a/msmcobalt/file_contexts b/msmcobalt/file_contexts
index 0a29e092..c22e4a62 100644
--- a/msmcobalt/file_contexts
+++ b/msmcobalt/file_contexts
@@ -55,3 +55,8 @@
# data files
#
/data/misc/qvop(/.*)? u:object_r:qvop_data_file:s0
+
+##################################
+# non-hlos mount points
+/firmware u:object_r:firmware_file:s0
+/bt_firmware u:object_r:bt_firmware_file:s0