am 2abfe7d4: Allow vold to invoke blkid, use external ASECs.

* commit '2abfe7d4f72b0265b1dec31e675650c77998f4d6':
  Allow vold to invoke blkid, use external ASECs.
This commit is contained in:
Jeff Sharkey 2013-10-17 18:48:46 -07:00 committed by Android Git Automerger
commit 1d5176cd91

View file

@ -29,6 +29,9 @@ allow vold domain:{ file lnk_file } r_file_perms;
allow vold domain:process { signal sigkill };
allow vold self:capability { sys_ptrace kill };
# For blkid
allow vold shell_exec:file rx_file_perms;
# XXX Label sysfs files with a specific type?
allow vold sysfs:file rw_file_perms;
@ -65,3 +68,5 @@ allow vold asec_image_file:dir rw_dir_perms;
security_access_policy(vold)
allow vold asec_apk_file:dir { rw_dir_perms setattr };
allow vold asec_apk_file:file { r_file_perms setattr };
allow vold sdcard_external:dir create_dir_perms;
allow vold sdcard_external:file create_file_perms;