ADHOC
/
replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity

sepolicy: More policy for sdcardfs 

Change-Id: Iddc6f86bd1e4b9942139acf9b7e75279b3865b8a
This commit is contained in:
Steve Kondik 2016-07-25 22:11:33 -07:00
parent cdb0ea61fa
commit 4a24ffeb6a
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sepolicy/file_contexts
View File

@ -55,3 +55,10 @@
# bash
/system/xbin/bash u:object_r:shell_exec:s0
# emulated storage via sdcardfs
/mnt/runtime/(default|read|write)/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
/storage/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
/mnt/shell/emulated/([1-9])?[0-9](/.*)? u:object_r:media_rw_data_file:s0
/data/media\.tmp(/.*)? u:object_r:media_rw_data_file:s0

2
sepolicy/system_server.te
View File

@ -7,3 +7,5 @@ allow system_server persist_property_file:dir rw_dir_perms;
allow system_server persist_property_file:file { create_file_perms unlink };
allow system_server storage_stub_file:dir { getattr };
allow system_server media_rw_data_file:dir r_dir_perms;