diff options
author | Venkataraman Nerellapalli <venkataraman.nerellapalli@codeaurora.org> | 2017-11-29 12:18:23 +0530 |
---|---|---|
committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-01-10 01:12:46 -0800 |
commit | 6aa9c6fa2ba07d966da130522446098e64a9e06b (patch) | |
tree | 6614b1d2fbb4c9188dbe98d309fe3d696611939d /apq8098_latv | |
parent | 6347001614d470269f82759fd49c8b39cf097716 (diff) | |
download | android_device_qcom_sepolicy-6aa9c6fa2ba07d966da130522446098e64a9e06b.tar.gz android_device_qcom_sepolicy-6aa9c6fa2ba07d966da130522446098e64a9e06b.tar.bz2 android_device_qcom_sepolicy-6aa9c6fa2ba07d966da130522446098e64a9e06b.zip |
APQ8098_LATV: SEPolicies for FOTA failures.
Add SEPolicy files to fix FOTA failures in apq8098.
Change-Id: Ie11e993c07c7eb9ba3e65cbb036cde99a4100f73
Diffstat (limited to 'apq8098_latv')
-rw-r--r-- | apq8098_latv/recovery.te | 30 | ||||
-rw-r--r-- | apq8098_latv/update_engine_common.te | 39 |
2 files changed, 69 insertions, 0 deletions
diff --git a/apq8098_latv/recovery.te b/apq8098_latv/recovery.te new file mode 100644 index 00000000..4f75bc4e --- /dev/null +++ b/apq8098_latv/recovery.te @@ -0,0 +1,30 @@ +# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +recovery_only(` + allow recovery vendor_shell_exec:file x_file_perms; +') diff --git a/apq8098_latv/update_engine_common.te b/apq8098_latv/update_engine_common.te new file mode 100644 index 00000000..af647472 --- /dev/null +++ b/apq8098_latv/update_engine_common.te @@ -0,0 +1,39 @@ +# Copyright (c) 2017, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +# Allow update_engine and update_engine_sideload (recovery) read/write on the +# device-specific partitions it should update. +allow update_engine_common { + custom_ab_block_device + xbl_block_device + boot_block_device + ssd_device + modem_block_device + system_block_device + mdtp_device +}:blk_file rw_file_perms; + |