summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjhonboy121 <alfredmathew05@gmail.com>2022-05-16 00:52:47 +0300
committerSemavi Ulusoy <doc.divxm@gmail.com>2022-05-16 00:53:04 +0300
commit8169c97296266553fe4969c79399c45c4a833b4a (patch)
treee9fc27f506fb13b342be7d4ddca067b0bebb6c4b
parentcc880b332d65e6a84af3b757453c1c0dc1ac170b (diff)
sepolicy: allow updater_app to access uncrypt_file & system_update_service
Signed-off-by: jhonboy121 <alfredmathew05@gmail.com> Change-Id: I7fa629ff0f257183d5f2767a709cfc8f6d69cdd4
-rw-r--r--common/private/updater_app.te6
1 files changed, 6 insertions, 0 deletions
diff --git a/common/private/updater_app.te b/common/private/updater_app.te
index fe0fd2f..049ed42 100644
--- a/common/private/updater_app.te
+++ b/common/private/updater_app.te
@@ -6,4 +6,10 @@ r_dir_file(updater_app, storage_file)
allow updater_app backuptool:process noatsecure;
allow updater_app media_rw_data_file:file { open read write getattr };
+# Allow access to /cache/recovery/uncrypt_file
allow updater_app cache_file:file create_file_perms;
+allow updater_app cache_file:dir r_dir_perms;
+allow updater_app cache_recovery_file:dir rw_dir_perms;
+allow updater_app cache_recovery_file:file create_file_perms;
+
+allow updater_app system_update_service:service_manager find;