tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Grant kernel access to new "virtual_disk" file. am: 3f724c95a8

Browse source 
am: 9222988479

Change-Id: Idd03a8f1a6b3a315ee6be221ea7d91b06be9477e
This commit is contained in:
Jeff Sharkey 2017-03-26 23:46:29 +00:00 committed by android-build-merger
commit a4960ef90f
2 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
public/kernel.te
View file

@ -73,6 +73,9 @@ userdebug_or_eng(`
allow kernel media_rw_data_file:dir create_dir_perms;
allow kernel media_rw_data_file:file create_file_perms;
# Access to /data/misc/vold/virtual_disk.
allow kernel vold_data_file:file read;
###
### neverallow rules
###

4
public/vold.te
View file

@ -175,9 +175,9 @@ allow vold user_profile_data_file:dir create_dir_perms;
allow vold misc_block_device:blk_file w_file_perms;
neverallow { domain -vold } vold_data_file:dir ~{ open create read getattr setattr search relabelto ioctl };
neverallow { domain -vold } vold_data_file:notdevfile_class_set ~{ relabelto getattr };
neverallow { domain -vold -kernel } vold_data_file:notdevfile_class_set ~{ relabelto getattr };
neverallow { domain -vold -init } vold_data_file:dir *;
neverallow { domain -vold -init } vold_data_file:notdevfile_class_set *;
neverallow { domain -vold -init -kernel } vold_data_file:notdevfile_class_set *;
neverallow { domain -vold -init } restorecon_prop:property_service set;
neverallow vold fsck_exec:file execute_no_trans;