sepolicy: recovery: allow mounting of internal storage

Change-Id: I93baf0d9ce9348d59dee2bd4ef764ed8386fabb7
AOSiP · Apr 13, 2020 · b9f79b3 · b9f79b3
1 parent fb92a02
commit b9f79b3
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/common/private/recovery.te b/common/private/recovery.te
@@ -6,9 +6,12 @@ permissive recovery;
 # Volume manager
 allow recovery block_device:dir create_dir_perms;
 allow recovery block_device:blk_file create_file_perms;
-allow recovery self:capability mknod;
+allow recovery self:capability { mknod fsetid };
 allow recovery proc_filesystems:file r_file_perms;
 allow recovery self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
 allow recovery sysfs:file w_file_perms; # writing to /sys/*/uevent during coldboot.
 allow recovery tmpfs:file link;
+allow recovery rootfs:dir w_dir_perms;
+allow recovery rootfs:file { create_file_perms link };
+allow recovery media_rw_data_file:dir r_dir_perms;
 ')