commit 94995cd0d344b503b1d4a6b2ab646e0943bc56aa
author Tommy Chiu <tommychiu@google.com> Fri Mar 04 16:50:01 2022 +0800
committer TreeHugger Robot <treehugger-gerrit@google.com> Mon Mar 07 00:24:55 2022 +0000
tree a0f84b3445896a03bdd305444bda200736e873e9
parent 9fe6aa97af4d094b1b00b21952857bc20cfd7ba2

sepolicy: add permissions to let recovery wipe citadel

This gives recovery the ability to remove user data from citadel in the
same manner as issuing a `fastboot -w` does.  This doesn't allow for
resetting FRP data, just user data.

audit: type=1400 audit(1646379959.016:9): avc:  denied  { getattr } for
  pid=348 comm="recovery" path="/dev/gsc0" dev="tmpfs" ino=754
  scontext=u:r:recovery:s0 tcontext=u:object_r:citadel_device:s0
  tclass=chr_file permissive=0

Bug: 222005928
Change-Id: Ia6113999aecacbbbb31d7a8659a45c0e5a0db2c9