replicant-vendor_replicant/sepolicy/app.te

# Access OBBs (sdcard_posix) mounted by vold
# File write access allowed for FDs returned through Storage Access Framework
allow appdomain sdcard_posix:dir r_dir_perms;
allow appdomain sdcard_posix:file rw_file_perms;

# Themed resources (i.e. composed icons)
allow appdomain themeservice_app_data_file:dir r_dir_perms;
allow appdomain themeservice_app_data_file:file r_file_perms;
Grant platform apps access to /mnt/media_rw with sdcard_posix label Also allow apps to read the contents of mounted OBBs. See AOSP Change-Id: I66df236eade3ca25a10749dd43d173ff4628cfad and Change-Id: I49b722b24c1c7d9ab084ebee7c1e349d8d660ffa Change-Id: I757a2a8831c69d41c0496025a39eaf79ceb0e65f 2016-01-15 22:04:18 +00:00			`# Access OBBs (sdcard_posix) mounted by vold`
			`# File write access allowed for FDs returned through Storage Access Framework`
			`allow appdomain sdcard_posix:dir r_dir_perms;`
			`allow appdomain sdcard_posix:file rw_file_perms;`

sepolicy: Apps need to read themed resources Assets such as composed icons and ringtones need to be accessed by apps. This patch adds the policy needed to facilitate this. Change-Id: If47920b2cc5dbafe8d71a621782bb4a3351bd68c 2015-01-05 23:30:16 +00:00			`# Themed resources (i.e. composed icons)`
sepolicy: Put theme service in its own context Allow the theme manager and its data to be sandboxed in its own context Change-Id: I7898663d1c196bfe04fa4c539d20191a43fde284 2016-07-20 18:02:12 +00:00			`allow appdomain themeservice_app_data_file:dir r_dir_perms;`
			`allow appdomain themeservice_app_data_file:file r_file_perms;`