sepolicy: Apps need to read themed resources

Assets such as composed icons and ringtones need to be accessed
by apps.  This patch adds the policy needed to facilitate this.

Change-Id: If47920b2cc5dbafe8d71a621782bb4a3351bd68c
This commit is contained in:
Clark Scheff 2015-01-05 15:30:16 -08:00 committed by Gerrit Code Review
parent afbfad59d6
commit e9c2de0679
5 changed files with 16 additions and 1 deletions

3
sepolicy/app.te Normal file
View File

@ -0,0 +1,3 @@
# Themed resources (i.e. composed icons)
allow appdomain theme_data_file:dir r_dir_perms;
allow appdomain theme_data_file:file r_file_perms;

3
sepolicy/bootanim.te Normal file
View File

@ -0,0 +1,3 @@
# Themed resources (bootanimation)
allow bootanim theme_data_file:dir search;
allow bootanim theme_data_file:file r_file_perms;

3
sepolicy/mediaserver.te Normal file
View File

@ -0,0 +1,3 @@
# Themed resources (i.e. composed icons)
allow mediaserver theme_data_file:dir r_dir_perms;
allow mediaserver theme_data_file:file r_file_perms;

View File

@ -13,8 +13,10 @@ BOARD_SEPOLICY_UNION += \
property_contexts \
seapp_contexts \
service_contexts \
auditd.te \
adbd.te \
app.te \
auditd.te \
bootanim.te \
healthd.te \
hostapd.te \
installd.te \
@ -28,4 +30,5 @@ BOARD_SEPOLICY_UNION += \
system_app.te \
ueventd.te \
vold.te \
zygote.te \
mac_permissions.xml

3
sepolicy/zygote.te Normal file
View File

@ -0,0 +1,3 @@
allow zygote theme_data_file:file r_file_perms;
allow zygote theme_data_file:dir r_dir_perms;