| Tom Marshall | 5e84bfc | 2018-02-17 01:17:34 +0100 | [diff] [blame] | 1 | recovery_only(` |
| Alessandro Astone | 0a5dfb2 | 2019-05-05 00:23:03 +0200 | [diff] [blame] | 2 | userdebug_or_eng(` |
| 3 | permissive recovery; |
| 4 | ') |
| Alessandro Astone | f51b60c | 2019-03-20 21:10:54 +0100 | [diff] [blame] | 5 | |
| 6 | # Volume manager |
| Michael Bestas | 31b9bc5 | 2019-03-23 18:17:15 +0200 | [diff] [blame] | 7 | allow recovery block_device:dir create_dir_perms; |
| Alessandro Astone | fb92a02 | 2019-03-29 18:10:57 +0100 | [diff] [blame] | 8 | allow recovery block_device:blk_file create_file_perms; |
| Alessandro | b9f79b3 | 2020-04-13 14:28:56 +0200 | [diff] [blame^] | 9 | allow recovery self:capability { mknod fsetid }; |
| Michael Bestas | 2b04642 | 2019-03-23 13:07:51 +0200 | [diff] [blame] | 10 | allow recovery proc_filesystems:file r_file_perms; |
| Alessandro Astone | f51b60c | 2019-03-20 21:10:54 +0100 | [diff] [blame] | 11 | allow recovery self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl; |
| Michael Bestas | 4368f9b | 2019-03-23 18:55:43 +0200 | [diff] [blame] | 12 | allow recovery sysfs:file w_file_perms; # writing to /sys/*/uevent during coldboot. |
| Adrian DC | e89d910 | 2016-08-02 23:21:35 +0200 | [diff] [blame] | 13 | allow recovery tmpfs:file link; |
| Alessandro | b9f79b3 | 2020-04-13 14:28:56 +0200 | [diff] [blame^] | 14 | allow recovery rootfs:dir w_dir_perms; |
| 15 | allow recovery rootfs:file { create_file_perms link }; |
| 16 | allow recovery media_rw_data_file:dir r_dir_perms; |
| Tom Marshall | 5e84bfc | 2018-02-17 01:17:34 +0100 | [diff] [blame] | 17 | ') |