sepolicy: Allow recovery to read sysfs_perdev_minors
* Fixes ERROR: recovery: failed to read max minors
Change-Id: I74b3407df45b96eba9b16aac3411a7765c6335aa
diff --git a/common/private/file.te b/common/private/file.te
index b2bfa43..6fb480b 100644
--- a/common/private/file.te
+++ b/common/private/file.te
@@ -1,2 +1,3 @@
type sdcard_posix, sdcard_type, sdcard_posix_contextmount_type, fs_type, mlstrustedobject;
type adbroot_data_file, file_type, data_file_type, core_data_file_type;
+type sysfs_perdev_minors, fs_type, sysfs_type;
diff --git a/common/private/genfs_contexts b/common/private/genfs_contexts
index c629305..79a7736 100644
--- a/common/private/genfs_contexts
+++ b/common/private/genfs_contexts
@@ -3,3 +3,4 @@
)
genfscon sysfs /devices/virtual/timed_output/vibrator u:object_r:sysfs_vibrator:s0
+genfscon sysfs /module/mmcblk/parameters/perdev_minors u:object_r:sysfs_perdev_minors:s0
diff --git a/common/private/recovery.te b/common/private/recovery.te
index 2b6f7fa..1b5bd9b 100644
--- a/common/private/recovery.te
+++ b/common/private/recovery.te
@@ -14,6 +14,7 @@
allow recovery rootfs:dir w_dir_perms;
allow recovery rootfs:file { create_file_perms link };
allow recovery media_rw_data_file:dir r_dir_perms;
+allow recovery sysfs_perdev_minors:file r_file_perms;
# Read fbe encryption info
r_dir_file(recovery, unencrypted_data_file)