Merge "Allow reading of radio data files passed over binder."

This commit is contained in:
Nick Kralevich 2014-04-04 17:50:35 +00:00 committed by Gerrit Code Review
commit 3fa9b4ddcb
3 changed files with 9 additions and 0 deletions

3
app.te
View file

@ -101,6 +101,9 @@ allow appdomain system_data_file:lnk_file getattr;
# Allow read/stat of /data/media files passed by Binder or local socket IPC. # Allow read/stat of /data/media files passed by Binder or local socket IPC.
allow appdomain media_rw_data_file:file { read getattr }; allow appdomain media_rw_data_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow appdomain radio_data_file:file { read getattr };
# Access SDcard. # Access SDcard.
allow appdomain sdcard_type:dir create_dir_perms; allow appdomain sdcard_type:dir create_dir_perms;
allow appdomain sdcard_type:file create_file_perms; allow appdomain sdcard_type:file create_file_perms;

View file

@ -41,3 +41,6 @@ r_dir_file(drmserver, media_rw_data_file)
# Read resources from open apk files passed over Binder. # Read resources from open apk files passed over Binder.
allow drmserver apk_data_file:file { read getattr }; allow drmserver apk_data_file:file { read getattr };
allow drmserver asec_apk_file:file { read getattr }; allow drmserver asec_apk_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow drmserver radio_data_file:file { read getattr };

View file

@ -40,6 +40,9 @@ allow mediaserver sysfs:file rw_file_perms;
allow mediaserver apk_data_file:file { read getattr }; allow mediaserver apk_data_file:file { read getattr };
allow mediaserver asec_apk_file:file { read getattr }; allow mediaserver asec_apk_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow mediaserver radio_data_file:file { read getattr };
# Access camera device. # Access camera device.
allow mediaserver camera_device:chr_file rw_file_perms; allow mediaserver camera_device:chr_file rw_file_perms;
allow mediaserver rpmsg_device:chr_file rw_file_perms; allow mediaserver rpmsg_device:chr_file rw_file_perms;