Stephen Smalley | 6d10ca8 | 2014-01-13 09:45:45 -0500 | [diff] [blame^] | 1 | # recovery console (used in recovery init.rc for /sbin/recovery) |
2 | type recovery, domain; | ||||
3 | allow recovery rootfs:file entrypoint; | ||||
4 | unconfined_domain(recovery) | ||||
5 | relabelto_domain(recovery) | ||||
6 | |||||
7 | allow recovery {fs_type dev_type -kmem_device file_type}:dir_file_class_set relabelto; | ||||
8 | allow recovery unlabeled:filesystem mount; | ||||
9 | |||||
10 | allow recovery self:process execmem; | ||||
11 | allow recovery cache_file:file rx_file_perms; |