tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow sdcardd tmpfs read access.

Browse source 
Address the following denial:
type=1400 audit(1453854842.899:7): avc: denied { search } for pid=1512 comm="sdcard" name="/" dev="tmpfs" ino=7547 scontext=u:r:sdcardd:s0 tcontext=u:object_r:tmpfs:s0 tclass=dir permissive=0

vold: EmulatedVolume calls sdcard to mount on /storage/emulated.

Bug: 26807309
Change-Id: Ifdd7c356589f95165bba489dd06282a4087e9aee
This commit is contained in:
dcashman 2016-01-27 07:24:34 -08:00
parent 98f60e5c74
commit db559a348e
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
sdcardd.te
View file

@ -4,6 +4,7 @@ type sdcardd_exec, exec_type, file_type;
allow sdcardd cgroup:dir create_dir_perms; allow sdcardd cgroup:dir create_dir_perms;
allow sdcardd fuse_device:chr_file rw_file_perms; allow sdcardd fuse_device:chr_file rw_file_perms;
allow sdcardd rootfs:dir mounton; # TODO: deprecated in M allow sdcardd rootfs:dir mounton; # TODO: deprecated in M
allow sdcardd tmpfs:dir r_dir_perms;
allow sdcardd mnt_media_rw_file:dir r_dir_perms; allow sdcardd mnt_media_rw_file:dir r_dir_perms;
allow sdcardd storage_file:dir search; allow sdcardd storage_file:dir search;
allow sdcardd storage_stub_file:dir { search mounton }; allow sdcardd storage_stub_file:dir { search mounton };