tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Temporarily relax Zygote storage mounting rules.

Browse source 
am: 9f02b30a72

Change-Id: Id93156bcb3e8149b5c9edf29e60c0298a5d48c55
This commit is contained in:
Jeff Sharkey 2019-01-31 20:06:32 -08:00 committed by android-build-merger
commit 1df04c3716
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
private/zygote.te
View file

@ -97,7 +97,10 @@ allow zygote mnt_user_file:file create_file_perms;
# Allowed to mount user-specific storage into place
allow zygote storage_file:dir { search mounton };
# Allow mounting on sdcardfs dirs
allow zygote sdcardfs:dir { search mounton };
# TODO: reduce this back to only sdcardfs once b/123533205 is root-caused
# (Technically "sdcardfs" and "media_rw_data_file" are equivalent, since
# sdcardfs simply wraps files stored under /data/media.)
allow zygote { sdcardfs media_rw_data_file }:dir { search mounton };
# Handle --invoke-with command when launching Zygote with a wrapper command.
allow zygote zygote_exec:file rx_file_perms;