tree cd28664deb78b4f07dbe9c40d35cf8fc5ee4cd0e
parent 441be957ca86b0a502a814998994b2f9f22949a4
author Richard Fung <richardfung@google.com> 1637615772 +0000
committer Richard Fung <richardfung@google.com> 1637615934 +0000

Support reading block apexes from system_server

This relaxes the neverallow so that it is possible to write a new
SELinux allow for system_server to read /dev/block/vd*. It still isn't
possible unless a vendor enables it.

Bug: 196965847
Test: m -j
local_test_runner arc.Boot.vm

Change-Id: Idad79284778cf02066ff0b982480082828f24e19