tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow some vold_prepare_subdirs denials." into pi-dev

Browse source 
am: cdc68c652d

Change-Id: I7a2898cbbb77d8c2b88c50617e373423df13fe56
This commit is contained in:
Joel Galenson 2018-04-13 14:24:47 -07:00 committed by android-build-merger
commit 6b51856d0e
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
private/vold_prepare_subdirs.te
View file

@ -7,13 +7,15 @@ allow vold_prepare_subdirs devpts:chr_file rw_file_perms;
allow vold_prepare_subdirs vold:fd use;
allow vold_prepare_subdirs vold:fifo_file { read write };
allow vold_prepare_subdirs file_contexts_file:file r_file_perms;
allow vold_prepare_subdirs self:global_capability_class_set { chown dac_override };
allow vold_prepare_subdirs self:global_capability_class_set { chown dac_override fowner };
allow vold_prepare_subdirs self:process setfscreate;
allow vold_prepare_subdirs {
system_data_file
vendor_data_file
}:dir { open read write add_name remove_name };
allow vold_prepare_subdirs vold_data_file:dir { create open read write search getattr setattr remove_name rmdir };
}:dir { open read write add_name remove_name relabelfrom };
allow vold_prepare_subdirs system_data_file:file getattr;
allow vold_prepare_subdirs vold_data_file:dir { create open read write search getattr setattr remove_name rmdir relabelto };
allow vold_prepare_subdirs vold_data_file:file { getattr unlink };
allow vold_prepare_subdirs storaged_data_file:dir create_dir_perms;
allow vold_prepare_subdirs fingerprint_vendor_data_file:dir create_dir_perms;
allow vold_prepare_subdirs storaged_data_file:dir { create_dir_perms relabelto };
allow vold_prepare_subdirs storaged_data_file:file getattr;
allow vold_prepare_subdirs fingerprint_vendor_data_file:dir { create_dir_perms relabelto };