Define types for an OEM-provided filesystem.
Bug: 13340779 Change-Id: I6151b6b61ddf90327d51815d13fd65be561be587
This commit is contained in:
parent
fd783d1b1f
commit
6736bac218
2 changed files with 5 additions and 0 deletions
4
app.te
4
app.te
|
@ -52,6 +52,10 @@ allow appdomain app_data_file:notdevfile_class_set create_file_perms;
|
||||||
allow appdomain system_data_file:dir r_dir_perms;
|
allow appdomain system_data_file:dir r_dir_perms;
|
||||||
allow appdomain system_data_file:file { execute execute_no_trans open };
|
allow appdomain system_data_file:file { execute execute_no_trans open };
|
||||||
|
|
||||||
|
# Access to OEM provided data and apps
|
||||||
|
allow appdomain oemfs:dir r_dir_perms;
|
||||||
|
allow appdomain oemfs:file rx_file_perms;
|
||||||
|
|
||||||
# Execute the shell or other system executables.
|
# Execute the shell or other system executables.
|
||||||
allow appdomain shell_exec:file rx_file_perms;
|
allow appdomain shell_exec:file rx_file_perms;
|
||||||
allow appdomain system_file:file rx_file_perms;
|
allow appdomain system_file:file rx_file_perms;
|
||||||
|
|
1
file.te
1
file.te
|
@ -33,6 +33,7 @@ type sdcard_external, sdcard_type, fs_type, mlstrustedobject;
|
||||||
type debugfs, fs_type, mlstrustedobject;
|
type debugfs, fs_type, mlstrustedobject;
|
||||||
type pstorefs, fs_type;
|
type pstorefs, fs_type;
|
||||||
type functionfs, fs_type;
|
type functionfs, fs_type;
|
||||||
|
type oemfs, fs_type;
|
||||||
|
|
||||||
# File types
|
# File types
|
||||||
type unlabeled, file_type;
|
type unlabeled, file_type;
|
||||||
|
|
Loading…
Reference in a new issue