tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow vold_prepare_subdirs to delete more files.

Browse source 
Bug: 78591623
Test: Create a new user with a fingerprint. Reboot. Delete that user.
    Check for denials, files left over in /data/*_{c,d}e/10
Merged-In: Ib818e112a98c5b954ee829e93ebd69c3b12940cf
Change-Id: Ib818e112a98c5b954ee829e93ebd69c3b12940cf
This commit is contained in:
Paul Crowley 2018-04-26 13:41:13 -07:00
parent 1818b11242
commit 0fe31e04ea
1 changed files with 11 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
private/vold_prepare_subdirs.te
View file

@ -13,9 +13,14 @@ allow vold_prepare_subdirs {
system_data_file
vendor_data_file
}:dir { open read write add_name remove_name rmdir relabelfrom };
allow vold_prepare_subdirs system_data_file:file { getattr unlink };
allow vold_prepare_subdirs vold_data_file:dir { create open read write search getattr setattr remove_name rmdir relabelto };
allow vold_prepare_subdirs vold_data_file:file { getattr unlink };
allow vold_prepare_subdirs storaged_data_file:dir { create_dir_perms relabelto };
allow vold_prepare_subdirs storaged_data_file:file getattr;
allow vold_prepare_subdirs fingerprint_vendor_data_file:dir { create_dir_perms relabelto };
allow vold_prepare_subdirs {
fingerprint_vendor_data_file
storaged_data_file
vold_data_file
}:dir { create_dir_perms relabelto };
allow vold_prepare_subdirs {
fingerprint_vendor_data_file
storaged_data_file
system_data_file
vold_data_file
}:file { getattr unlink };