From e33cc1d37d3c620bce4fd7c96fcbca912743d7c0 Mon Sep 17 00:00:00 2001
From: Dan Pasanen <dan.pasanen@gmail.com>
Date: Sun, 14 Dec 2014 10:36:10 -0600
Subject: [PATCH] sepolicy: allow recovery read access to /data/media/ files
 and dirs

Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
---
 sepolicy/recovery.te | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te
index 9d17beb3..6110f9a8 100644
--- a/sepolicy/recovery.te
+++ b/sepolicy/recovery.te
@@ -17,6 +17,10 @@ allow recovery system_data_file:file r_file_perms;
 allow recovery rootfs:file create_file_perms;
 allow recovery rootfs:dir { write add_name };
 
+# Read /data/media files and directories
+allow recovery media_rw_data_file:dir r_dir_perms;
+allow recovery media_rw_data_file:file r_file_perms;
+
 # Control properties
 allow recovery recovery_prop:property_service set;