Make the sepolicy for gsid cleaner

Test: compile pass

Change-Id: Id147035df1685134938b70f07599e6cecbdbb6f4
This commit is contained in:
Howard Chen 2020-01-17 14:19:56 +08:00 committed by Howard Chen
parent 8b5a90a5e4
commit e978947408

View file

@ -111,8 +111,12 @@ allow gsid userdata_block_device:blk_file r_file_perms;
allow gsid metadata_file:dir { search getattr }; allow gsid metadata_file:dir { search getattr };
allow gsid { allow gsid {
gsi_metadata_file gsi_metadata_file
}:dir create_dir_perms;
allow gsid {
ota_metadata_file ota_metadata_file
}:dir rw_dir_perms; }:dir rw_dir_perms;
allow gsid { allow gsid {
gsi_metadata_file gsi_metadata_file
ota_metadata_file ota_metadata_file
@ -126,7 +130,6 @@ allow gsid {
gsi_data_file gsi_data_file
ota_image_data_file ota_image_data_file
}:file create_file_perms; }:file create_file_perms;
allow gsid gsi_metadata_file:dir create;
allowxperm gsid { allowxperm gsid {
gsi_data_file gsi_data_file
ota_image_data_file ota_image_data_file