From 0d269abc5900d2d30f23463c13b171c1095e2a0b Mon Sep 17 00:00:00 2001
From: Alexander Koskovich <akoskovich@pm.me>
Date: Fri, 3 Jun 2022 18:01:26 -0700
Subject: [PATCH] dre: sepolicy: Allow update engine to flash oplusstanvbk

 * Needed when payload.bin contains oplusstanvbk.

Change-Id: I5139aff2b0152790e1ebf8c598fc99c0f00fd21d
---
 sepolicy/vendor/hal_bootctl.te          | 1 +
 sepolicy/vendor/update_engine_common.te | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 sepolicy/vendor/hal_bootctl.te
 create mode 100644 sepolicy/vendor/update_engine_common.te

diff --git a/sepolicy/vendor/hal_bootctl.te b/sepolicy/vendor/hal_bootctl.te
new file mode 100644
index 0000000..5b16097
--- /dev/null
+++ b/sepolicy/vendor/hal_bootctl.te
@@ -0,0 +1 @@
+allow hal_bootctl vendor_modem_efs_partition_device:blk_file getattr;
diff --git a/sepolicy/vendor/update_engine_common.te b/sepolicy/vendor/update_engine_common.te
new file mode 100644
index 0000000..bde8371
--- /dev/null
+++ b/sepolicy/vendor/update_engine_common.te
@@ -0,0 +1 @@
+allow update_engine_common vendor_modem_efs_partition_device:blk_file rw_file_perms;