tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add metadata_file class for root of metadata folder.

Browse source 
Bug: 77335096
Test: booted device with metadata encryption and without
Change-Id: I5bc5d46deb4e91912725c4887fde0c3a41c9fc91
This commit is contained in:
Paul Crowley 2018-04-20 11:14:49 -07:00
parent 8c0d460907
commit 42bd1638bf
5 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/26.0/26.0.ignore.cil
View file

@ -66,6 +66,7 @@
lowpan_service
mediaextractor_update_service
mediaprovider_tmpfs
metadata_file
mnt_vendor_file
netd_stable_secret_prop
network_watchlist_data_file

1
private/compat/27.0/27.0.ignore.cil
View file

@ -54,6 +54,7 @@
lowpan_prop
lowpan_service
mediaextractor_update_service
metadata_file
mnt_vendor_file
network_watchlist_data_file
network_watchlist_service

4
public/file.te
View file

@ -150,7 +150,9 @@ type vendor_framework_file, vendor_file_type, file_type;
# Default type for everything in /vendor/overlay
type vendor_overlay_file, vendor_file_type, file_type;
# /metadata subdirectories
# /metadata partition itself
type metadata_file, file_type;
# Vold files within /metadata
type vold_metadata_file, file_type;
# Speedup access for trusted applications to the runtime event tags

3
public/init.te
View file

@ -98,6 +98,9 @@ allow init configfs:dir mounton;
allow init configfs:dir create_dir_perms;
allow init configfs:{ file lnk_file } create_file_perms;
# /metadata
allow init metadata_file:dir mounton;
# Use tmpfs as /data, used for booting when /data is encrypted
allow init tmpfs:dir relabelfrom;

1
public/vold.te
View file

@ -17,6 +17,7 @@ allow vold sysfs_usb:file w_file_perms;
allow vold sysfs_zram_uevent:file w_file_perms;
r_dir_file(vold, rootfs)
r_dir_file(vold, metadata_file)
allow vold {
proc # b/67049235 processes /proc/<pid>/* files are mislabeled.
proc_cmdline