From 47157353af20c55890181119850eff698de298e6 Mon Sep 17 00:00:00 2001
From: Tom Cherry <tomcherry@google.com>
Date: Mon, 30 Jul 2018 16:24:29 -0700
Subject: [PATCH] allow init to run fsck for early mount partitions
Bug: 111883560
Test: fsck runs successfully during early mount
Change-Id: I697d0ab8ba51824d5c5062b48370a73438311566
---
public/init.te | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/init.te b/public/init.te
index e37f1ce5e..1a5a651f8 100644
--- a/public/init.te
+++ b/public/init.te
@@ -29,8 +29,8 @@ allow init device:file relabelfrom;
allow init runtime_event_log_tags_file:file { open write setattr relabelto create };
# /dev/socket
allow init { device socket_device }:dir relabelto;
-# /dev/random, /dev/urandom
-allow init random_device:chr_file relabelto;
+# Relabel /dev nodes created in first stage init, /dev/null, /dev/ptmx, /dev/random, /dev/urandom
+allow init { null_device ptmx_device random_device } : chr_file relabelto;
# /dev/device-mapper, /dev/block(/.*)?
allow init tmpfs:{ chr_file blk_file } relabelfrom;
allow init tmpfs:blk_file getattr;
--
GitLab