replicant-vendor_replicant/sepolicy/vold.te

# Allow vold to manage ASEC
allow vold sdcard_external:file create_file_perms;

# Allow vold to change context for mounted ext4 sdcard
relabelto_domain(vold)
allow vold labeledfs:filesystem { relabelfrom };
allow vold sdcard_external:filesystem { relabelfrom relabelto };
sepolicy: allow vold to create files on external sdcard This is required for ASEC support. Vold can already create and access directories, but do not yet have the permission for files. Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901 2013-11-14 03:46:26 +00:00			`# Allow vold to manage ASEC`
			`allow vold sdcard_external:file create_file_perms;`
sepolicy: allow vold to mount ext4 sdcard When vold mounts an ext4 sdcard, it needs to force the context to sdcard_external. avc: denied { relabelfrom } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:labeledfs:s0 tclass=filesystem avc: denied { relabelto } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem avc: denied { relabelfrom } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem Change-Id: I80f42fbdf738dee10958ce1bdc1893a41234f0d9 2013-11-15 02:54:39 +00:00
			`# Allow vold to change context for mounted ext4 sdcard`
			`relabelto_domain(vold)`
			`allow vold labeledfs:filesystem { relabelfrom };`
			`allow vold sdcard_external:filesystem { relabelfrom relabelto };`