24 lines
606 B
Plaintext
24 lines
606 B
Plaintext
|
# Super modem mounting
|
||
|
|
allow fsg_file self:filesystem associate;
|
||
|
|
allow init fsg_file:dir mounton;
|
||
|
|
allow init fsg_file:filesystem { getattr mount relabelfrom unmount };
|
||
|
|
allow init firmware_file:filesystem unmount;
|
||
|
|
|
||
|
|
# Allow init to access loop devices
|
||
|
|
allow init loop_device:blk_file { create setattr unlink };
|
||
|
|
allowxperm init loop_device:blk_file ioctl {
|
||
|
|
LOOP_GET_STATUS64
|
||
|
|
LOOP_GET_STATUS
|
||
|
|
LOOP_SET_STATUS64
|
||
|
|
LOOP_SET_STATUS
|
||
|
|
BLKFLSBUF
|
||
|
|
};
|
||
|
|
|
||
|
|
# Product persist
|
||
|
|
allow init mnt_product_file:dir mounton;
|
||
|
|
|
||
|
|
recovery_only(`
|
||
|
|
allow init self:capability sys_module;
|
||
|
|
allow init rootfs:system module_load;
|
||
|
|
')
|