tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: Adjust policy for migrate_legacy_obb_data.sh" into qt-dev

Browse source 
am: a85c5360ab

Change-Id: Id7800116e2ad5f2b4ce4a757b3c9c6bd61685c5e
This commit is contained in:
Daniel Rosenberg 2019-07-15 13:22:06 -07:00 committed by android-build-merger
commit 73c8c81d7e
2 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
prebuilts/api/29.0/private/migrate_legacy_obb_data.te
View file

@ -10,6 +10,14 @@ allow migrate_legacy_obb_data toolbox_exec:file rx_file_perms;
allow migrate_legacy_obb_data self:capability { chown dac_override dac_read_search fowner fsetid };
allow migrate_legacy_obb_data mnt_user_file:dir search;
allow migrate_legacy_obb_data mnt_user_file:lnk_file read;
allow migrate_legacy_obb_data storage_file:dir search;
allow migrate_legacy_obb_data storage_file:lnk_file read;
allow migrate_legacy_obb_data sdcard_type:dir create_dir_perms;
allow migrate_legacy_obb_data sdcard_type:file create_file_perms;
# TODO: This should not be necessary. We don't deliberately hand over
# any open file descriptors to this domain, so anything that triggers this
# should be a candidate for O_CLOEXEC.

8
private/migrate_legacy_obb_data.te
View file

@ -10,6 +10,14 @@ allow migrate_legacy_obb_data toolbox_exec:file rx_file_perms;
allow migrate_legacy_obb_data self:capability { chown dac_override dac_read_search fowner fsetid };
allow migrate_legacy_obb_data mnt_user_file:dir search;
allow migrate_legacy_obb_data mnt_user_file:lnk_file read;
allow migrate_legacy_obb_data storage_file:dir search;
allow migrate_legacy_obb_data storage_file:lnk_file read;
allow migrate_legacy_obb_data sdcard_type:dir create_dir_perms;
allow migrate_legacy_obb_data sdcard_type:file create_file_perms;
# TODO: This should not be necessary. We don't deliberately hand over
# any open file descriptors to this domain, so anything that triggers this
# should be a candidate for O_CLOEXEC.