Snap for 10543511 from 90a1f8048869ab478c66fc657a7ffd96809cb5f3 to udc-d1-release

Change-Id: Ic1cc5fa2431253ac552bec48b2bc0e6364754c67
diff --git a/vendor/file_contexts b/vendor/file_contexts
index b4d1530..c601837 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -1,6 +1,6 @@
 # Binaries
 /vendor/bin/hw/android\.hardware\.health-service\.zuma                      u:object_r:hal_health_default_exec:s0
-/vendor/bin/hw/android\.hardware\.boot@1\.2-service-zuma                    u:object_r:hal_bootctl_default_exec:s0
+/vendor/bin/hw/android\.hardware\.boot-service\.default-zuma                u:object_r:hal_bootctl_default_exec:s0
 /vendor/bin/hw/android\.hardware\.gxp\.logging@service-gxp-logging          u:object_r:gxp_logging_exec:s0
 /vendor/bin/hw/android\.hardware\.power\.stats-service\.pixel               u:object_r:hal_power_stats_default_exec:s0
 /vendor/bin/hw/android\.hardware\.secure_element-service\.thales                    u:object_r:hal_secure_element_st54spi_aidl_exec:s0
diff --git a/vendor/hal_bootctl_default.te b/vendor/hal_bootctl_default.te
index 2db4651..2ffeb27 100644
--- a/vendor/hal_bootctl_default.te
+++ b/vendor/hal_bootctl_default.te
@@ -2,3 +2,7 @@
 allow hal_bootctl_default sda_block_device:blk_file rw_file_perms;
 allow hal_bootctl_default sysfs_ota:file rw_file_perms;
 allow hal_bootctl_default tee_device:chr_file rw_file_perms;
+
+recovery_only(`
+  allow hal_bootctl_default rootfs:dir r_dir_perms;
+')