Define types for an OEM-provided filesystem.

Bug: 13340779
Change-Id: I6151b6b61ddf90327d51815d13fd65be561be587
This commit is contained in:
Jeff Sharkey 2014-04-24 13:31:29 -07:00 committed by Jeff Sharkey
parent fd783d1b1f
commit 6736bac218
2 changed files with 5 additions and 0 deletions

4
app.te
View file

@ -52,6 +52,10 @@ allow appdomain app_data_file:notdevfile_class_set create_file_perms;
allow appdomain system_data_file:dir r_dir_perms; allow appdomain system_data_file:dir r_dir_perms;
allow appdomain system_data_file:file { execute execute_no_trans open }; allow appdomain system_data_file:file { execute execute_no_trans open };
# Access to OEM provided data and apps
allow appdomain oemfs:dir r_dir_perms;
allow appdomain oemfs:file rx_file_perms;
# Execute the shell or other system executables. # Execute the shell or other system executables.
allow appdomain shell_exec:file rx_file_perms; allow appdomain shell_exec:file rx_file_perms;
allow appdomain system_file:file rx_file_perms; allow appdomain system_file:file rx_file_perms;

View file

@ -33,6 +33,7 @@ type sdcard_external, sdcard_type, fs_type, mlstrustedobject;
type debugfs, fs_type, mlstrustedobject; type debugfs, fs_type, mlstrustedobject;
type pstorefs, fs_type; type pstorefs, fs_type;
type functionfs, fs_type; type functionfs, fs_type;
type oemfs, fs_type;
# File types # File types
type unlabeled, file_type; type unlabeled, file_type;