tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Define types for an OEM-provided filesystem.

Browse source 
Bug: 13340779
Change-Id: I6151b6b61ddf90327d51815d13fd65be561be587
This commit is contained in:
Jeff Sharkey 2014-04-24 13:31:29 -07:00 committed by Jeff Sharkey
parent fd783d1b1f
commit 6736bac218
2 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app.te
View file

@ -52,6 +52,10 @@ allow appdomain app_data_file:notdevfile_class_set create_file_perms;
allow appdomain system_data_file:dir r_dir_perms;
allow appdomain system_data_file:file { execute execute_no_trans open };
# Access to OEM provided data and apps
allow appdomain oemfs:dir r_dir_perms;
allow appdomain oemfs:file rx_file_perms;
# Execute the shell or other system executables.
allow appdomain shell_exec:file rx_file_perms;
allow appdomain system_file:file rx_file_perms;

1
file.te
View file

@ -33,6 +33,7 @@ type sdcard_external, sdcard_type, fs_type, mlstrustedobject;
type debugfs, fs_type, mlstrustedobject;
type pstorefs, fs_type;
type functionfs, fs_type;
type oemfs, fs_type;
# File types
type unlabeled, file_type;