allocate perms to platformappdomain over system_data_file

This commit is contained in:
Haiqing Jiang 2012-07-27 14:01:22 -07:00 committed by Stephen Smalley
parent 19e7fbeb25
commit 2b47c3fc35

2
app.te
View file

@ -83,6 +83,8 @@ allow platformappdomain platform_app_data_file:notdevfile_class_set create_file_
# App sdcard file accesses
allow platformappdomain sdcard:dir create_dir_perms;
allow platformappdomain sdcard:file create_file_perms;
# System data file accesses (e.g, shared objects from the lib directory)
allow platformappdomain system_data_file:file { execute open };
#
# Untrusted apps.