lineage: Guard neverallowed policy for system_file with userdebug/eng (7125675e) · Commits · e / os / android_device_lineage_sepolicy

common/private/recovery.te

+2 −0

Original line number	Diff line number	Diff line
		@@ -31,7 +31,9 @@ allow recovery self:process setexec;
		domain_trans(recovery, otapreopt_chroot_exec, backuptool)

		# Some addons require this for A/B installation compatibility
		userdebug_or_eng(`
		allow recovery system_file:dir mounton;
		')

		# Volume manager
		allow recovery block_device:dir create_dir_perms;