1*e4a36f41SAndroid Build Coastguard Worker# binary for generic misc partition management 2*e4a36f41SAndroid Build Coastguard Workertype misctrl, domain, coredomain; 3*e4a36f41SAndroid Build Coastguard Workertype misctrl_exec, system_file_type, exec_type, file_type; 4*e4a36f41SAndroid Build Coastguard Worker 5*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(misctrl) 6*e4a36f41SAndroid Build Coastguard Worker 7*e4a36f41SAndroid Build Coastguard Workerallow misctrl misc_block_device:blk_file rw_file_perms; 8*e4a36f41SAndroid Build Coastguard Workerallow misctrl block_device:dir r_dir_perms; 9*e4a36f41SAndroid Build Coastguard Workerread_fstab(misctrl) 10*e4a36f41SAndroid Build Coastguard Worker 11*e4a36f41SAndroid Build Coastguard Workerset_prop(misctrl, misctrl_prop) 12*e4a36f41SAndroid Build Coastguard Worker 13*e4a36f41SAndroid Build Coastguard Worker# bootloader_message tries to find the fstab in the device config path first, 14*e4a36f41SAndroid Build Coastguard Worker# but because we've already booted up we can use the ro.boot properties instead, 15*e4a36f41SAndroid Build Coastguard Worker# so we can just ignore the SELinux denial. 16*e4a36f41SAndroid Build Coastguard Workerdontaudit misctrl sysfs_dt_firmware_android:dir search; 17*e4a36f41SAndroid Build Coastguard Workerdontaudit misctrl vendor_property_type:file read; 18