Home | History | Annotate | Download | only in public 
      1 # update_verifier
      2 type update_verifier, domain;
      3 type update_verifier_exec, exec_type, file_type;
      4 
      5 # Allow update_verifier to reach block devices in /dev/block.
      6 allow update_verifier block_device:dir search;
      7 
      8 # Read care map in /data/ota_package/.
      9 allow update_verifier ota_package_file:dir r_dir_perms;
     10 allow update_verifier ota_package_file:file r_file_perms;
     11 
     12 # Read all blocks in dm wrapped system partition.
     13 allow update_verifier dm_device:blk_file r_file_perms;
     14 
     15 # Allow update_verifier to reboot the device.
     16 set_prop(update_verifier, powerctl_prop)
     17 
     18 # Use Boot Control HAL
     19 hal_client_domain(update_verifier, hal_bootctl)
     20