xref: /aosp_15_r20/system/sepolicy/vendor/hal_bootctl_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1# Boot control subsystem
2type hal_bootctl_default, domain;
3hal_server_domain(hal_bootctl_default, hal_bootctl)
4
5type hal_bootctl_default_exec, exec_type, vendor_file_type, file_type;
6init_daemon_domain(hal_bootctl_default)
7
8# Needed for ReadDefaultFstab.
9allow hal_bootctl_default proc_cmdline:file r_file_perms;
10allow hal_bootctl_default sysfs_dt_firmware_android:dir search;
11allow hal_bootctl_default sysfs_dt_firmware_android:file r_file_perms;
12read_fstab(hal_bootctl_default)
13
14# Needed for reading/writing misc partition.
15allow hal_bootctl_default block_device:dir search;
16allow hal_bootctl_default misc_block_device:blk_file rw_file_perms;
17
18# Needed for writing to kernel log
19allow hal_bootctl_default kmsg_device:chr_file open;
20allow hal_bootctl_default kmsg_device:chr_file write;
21