platform_vendor_tequila/sepolicy/uncrypt.te

r_dir_file(uncrypt, media_rw_data_file)
allow uncrypt recovery_cache_file:dir create_dir_perms;
allow uncrypt recovery_cache_file:file create_file_perms;
allow uncrypt recovery_cache_file:fifo_file rw_file_perms;

allow uncrypt storage_file:dir r_dir_perms;
allow uncrypt storage_stub_file:dir r_dir_perms;
allow uncrypt fuse:dir r_dir_perms;
allow uncrypt fuse:file r_file_perms;
sepolicy: Allow cmupdater/uncrypt access to media_rw_data_file Change-Id: I800584af2919e3397b19d229fc28ad50cc4b2730 2015-01-23 08:44:20 +01:00			`r_dir_file(uncrypt, media_rw_data_file)`
sepolicy: Allow CMUpdater/uncrypt access to recovery_cache_file Change-Id: I514d128160ed4e04564077d7a2e2ad297af92e28 2015-02-19 00:01:22 +01:00			`allow uncrypt recovery_cache_file:dir create_dir_perms;`
			`allow uncrypt recovery_cache_file:file create_file_perms;`
sepolicy: Allow system server and uncrypt access pipe System server needs to be able to create a pipe in the cache partition for uncrypting OTAs. Uncrypt needs to be able to read and write the pipe. Change-Id: Ie03ee7d637eaecff8fe38bf03dc733b3915cd336 2016-02-09 19:43:31 +01:00			`allow uncrypt recovery_cache_file:fifo_file rw_file_perms;`
sepolicy: Allow uncrypt additional access Uncrypt may need access to additional selinux contexts for devices with created storage solutions. Change-Id: Ie90f130ff6bafdd195379f7d57504b2fce4ef830 2016-05-09 23:36:29 +02:00
			`allow uncrypt storage_file:dir r_dir_perms;`
			`allow uncrypt storage_stub_file:dir r_dir_perms;`
			`allow uncrypt fuse:dir r_dir_perms;`
			`allow uncrypt fuse:file r_file_perms;`