replicant-vendor_replicant/sepolicy/vold.te

domain_trans(init, rootfs, vold)

# Allow vold to manage ASEC
allow vold sdcard_external:file create_file_perms;

# Allow vold to access fuse for fuse-based fs
allow vold fuse_device:chr_file rw_file_perms;

# NTFS-3g wants to drop permission
allow vold self:capability { setgid setuid };
cm: sepolicy: Add contexts for cm recovery * Allow setup of secure adb (setup_adbd) * minivold in recovery Change-Id: Id1243154f4016b59e54890404cadea46a2aad212 2014-11-26 21:26:14 +00:00			`domain_trans(init, rootfs, vold)`

sepolicy: allow vold to create files on external sdcard This is required for ASEC support. Vold can already create and access directories, but do not yet have the permission for files. Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901 2013-11-14 03:46:26 +00:00			`# Allow vold to manage ASEC`
			`allow vold sdcard_external:file create_file_perms;`
sepolicy: allow vold to mount ext4 sdcard When vold mounts an ext4 sdcard, it needs to force the context to sdcard_external. avc: denied { relabelfrom } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:labeledfs:s0 tclass=filesystem avc: denied { relabelto } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem avc: denied { relabelfrom } for pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem Change-Id: I80f42fbdf738dee10958ce1bdc1893a41234f0d9 2013-11-15 02:54:39 +00:00
sepolicy: allow vold to mount fuse-based sdcard exfat and NTFS-3g requires access to /dev/fuse Change-Id: I35b13ada586c8de3fbe04156c2d10bf5e3c07b3a 2013-12-10 10:10:50 +00:00			`# Allow vold to access fuse for fuse-based fs`
			`allow vold fuse_device:chr_file rw_file_perms;`

			`# NTFS-3g wants to drop permission`
			`allow vold self:capability { setgid setuid };`