commit 032f61ede2067c71ff140ff2bdff90d4bc282fea
author Sashidhar Ganiga <sganig@codeaurora.org> Wed Oct 05 19:06:29 2016 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> Tue Nov 22 23:47:14 2016 -0800
tree c7dcf1394192b5c7e1fa0654a3c584722a90f199
parent b026863a289a9851eec51e8c9eb42cec5a976548

sepolicy: allow writing firmware files in recovery mode.

FOTA upgrading requires writing firmware images into
vfat firmware partition in recovery mode.

Change-Id: I0bd61196ea7acf00582e58980aaeb3cf5128aa7a

common/recovery.te

diff --git a/common/recovery.te b/common/recovery.te
index c83bc97..210c405 100644
--- a/common/recovery.te
+++ b/common/recovery.te
@@ -3,7 +3,8 @@
     allow recovery sdcard_type:dir r_dir_perms;
     allow recovery sdcard_type:file r_file_perms;
     allow recovery vfat:dir r_dir_perms;
-    allow recovery vfat:file r_file_perms;
+    allow recovery vfat:file create_file_perms;
+    allow recovery vfat:file rw_file_perms;
     allow recovery system_data_file:file r_file_perms;
     allow recovery system_data_file:dir r_dir_perms;
     allow recovery RIDL_data_file:file r_file_perms;