ADHOC/replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity

cm: sepolicy: fix denials for external storage

Browse Source 
Change-Id: I784a859671c69370cab0118a88a5fb0190352af9
This commit is contained in:
codeworkx 2016-01-01 17:29:10 +01:00
parent 053b1805da
commit 14e765cd71
4 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/fsck_untrusted.te Normal file
View File

@ -0,0 +1,2 @@
# External storage
allow fsck_untrusted self:capability sys_admin;

2
sepolicy/genfs_contexts
View File

@ -1 +1,3 @@
genfscon fuseblk / u:object_r:sdcard_external:s0 genfscon fuseblk / u:object_r:sdcard_external:s0
genfscon exfat / u:object_r:sdcard_external:s0
genfscon ntfs / u:object_r:sdcard_external:s0

2
sepolicy/system_server.te
View File

@ -4,3 +4,5 @@ allow system_server recovery_cache_file:file create_file_perms;
# Persistent properties # Persistent properties
allow system_server persist_property_file:dir rw_dir_perms; allow system_server persist_property_file:dir rw_dir_perms;
allow system_server persist_property_file:file { create_file_perms unlink }; allow system_server persist_property_file:file { create_file_perms unlink };
allow system_server storage_stub_file:dir { getattr };

5
sepolicy/vold.te
View File

@ -14,3 +14,8 @@ allow vold self:capability { setgid setuid };
recovery_only(` recovery_only(`
allow vold rootfs:dir { add_name write }; allow vold rootfs:dir { add_name write };
') ')
# External storage
allow vold storage_stub_file:dir { rw_file_perms search add_name };
allow vold mnt_media_rw_stub_file:dir r_dir_perms;
allow vold mkfs_exec:file { execute read open execute_no_trans };