From 5ca08db4e659e47cb0c44c297ec17d4854419621 Mon Sep 17 00:00:00 2001
From: nebrassy <nebras30@gmail.com>
Date: Wed, 10 Nov 2021 12:19:34 +0100
Subject: [PATCH] sepolicy: make postinstall permissive

Change-Id: I005669b31598a8917a1e70dc3284bdb857763955
---
 sepolicy/twrp.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sepolicy/twrp.te b/sepolicy/twrp.te
index 2a5961f5..5ed1e886 100755
--- a/sepolicy/twrp.te
+++ b/sepolicy/twrp.te
@@ -4,10 +4,10 @@ recovery_only(`
   permissive logd;
   permissive adbd;
   permissive fastbootd;
+  permissive postinstall;
   allow kernel unlabeled:file rw_file_perms;
   allow kernel tmpfs:file { read };
   allow kernel recovery:fd { use };
   allow unlabeled unlabeled:filesystem associate;
   allow vendor_init rootfs:dir read;
-  allow postinstall tmpfs:file { getattr read execute };
 ')