commit 10cec46a49bcf91f4d5c26d36772c9fc1e2fe3d7
author Alistair Strachan <astrachan@google.com> Wed Mar 20 13:32:29 2019 -0700
committer Alistair Strachan <astrachan@google.com> Wed Mar 20 15:04:31 2019 -0700
tree 33da1bdde1242ab22f274844a8db7377fbc3c64a
parent 80cc5ab39e74f286fff0fc2ef3c019a7ab2ebd24

Annotate block devices in sepolicy

This fixes some denials related to e2fsck.

Change-Id: I6c298fea270544112ae83b7e6e95e086d614734b

shared/sepolicy/file_contexts

diff --git a/shared/sepolicy/file_contexts b/shared/sepolicy/file_contexts
index 3a00066..0a853fd 100644
--- a/shared/sepolicy/file_contexts
+++ b/shared/sepolicy/file_contexts
@@ -1,6 +1,11 @@
 ##########################
 # Devices
 #
+/dev/block/vda  u:object_r:system_block_device:s0
+/dev/block/vdb  u:object_r:userdata_block_device:s0
+/dev/block/vdc  u:object_r:cache_block_device:s0
+/dev/block/vdd  u:object_r:system_block_device:s0
+/dev/block/vde  u:object_r:metadata_block_device:s0
 /dev/block/zram0  u:object_r:swap_block_device:s0
 /dev/e2e_managed  u:object_r:region_e2e_test_device:s0
 /dev/e2e_manager  u:object_r:region_e2e_test_device:s0