xref: /aosp_15_r20/system/sepolicy/vendor/hal_bootctl_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Boot control subsystem
2*e4a36f41SAndroid Build Coastguard Workertype hal_bootctl_default, domain;
3*e4a36f41SAndroid Build Coastguard Workerhal_server_domain(hal_bootctl_default, hal_bootctl)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workertype hal_bootctl_default_exec, exec_type, vendor_file_type, file_type;
6*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(hal_bootctl_default)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# Needed for ReadDefaultFstab.
9*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default proc_cmdline:file r_file_perms;
10*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default sysfs_dt_firmware_android:dir search;
11*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default sysfs_dt_firmware_android:file r_file_perms;
12*e4a36f41SAndroid Build Coastguard Workerread_fstab(hal_bootctl_default)
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Worker# Needed for reading/writing misc partition.
15*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default block_device:dir search;
16*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default misc_block_device:blk_file rw_file_perms;
17*e4a36f41SAndroid Build Coastguard Worker
18*e4a36f41SAndroid Build Coastguard Worker# Needed for writing to kernel log
19*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default kmsg_device:chr_file open;
20*e4a36f41SAndroid Build Coastguard Workerallow hal_bootctl_default kmsg_device:chr_file write;
21