ADHOC/replicant-vendor_replicant
3
0
Fork 0
Code Issues 6 Pull Requests Releases Activity
2,679 Commits 2 Branches 0 Tags 430 MiB
31a6dd5093
Commit Graph

11 Commits

Author SHA1 Message Date
Adrian DC
463feb6005 cm: sepolicy: Fix the vold blkid.tab denial from recovery 
* denied  { link } for  pid=190 comm="minivold"
    name="vold_blkid.tab" dev="tmpfs" scontext=u:r:vold:s0
    tcontext=u:object_r:vold_tmpfs:s0 tclass=file

Change-Id: I0b3e47dd00c5a32261691f51838a8d9af9778faa
 2016-08-05 00:00:03 -07:00
Matt Mower
511152cd2c sepolicy: Allow minivold execute_no_trans 
After assimilating minivold into /sbin/recovery, we need to allow the
minivold service (a symlink to the recovery binary) to transition from
the recovery to the vold domain.

Change-Id: I112e6d371a8da8fc55a06967852c869105190616
 2016-01-02 02:07:18 -08:00
codeworkx
14e765cd71 cm: sepolicy: fix denials for external storage 
Change-Id: I784a859671c69370cab0118a88a5fb0190352af9
 2016-01-01 17:30:27 +01:00
Christopher R. Palmer
da48ab89ac sepolicy: Allow vold to create tmpfs files for asec containers 
Change-Id: Ic8f1641928840774204099453b74dc1b52b3c6f8
 2015-02-19 10:55:07 -05:00
Matt Mower
2806bc4f0c sepolicy: Additional filesystem perms for recovery 
Change-Id: I66c785de7256ea64302a258af7c33cb717530343
 2015-01-16 14:36:24 +00:00
Tom Marshall
d553a9f8b5 cm: sepolicy: Remove vold external sdcard rules, moved to main sepolicy 
Change-Id: I67756bad2c6e1361ecc0052003f2b4e5e4dbb007
 2014-12-13 02:13:52 +00:00
Tom Marshall
39a4244c77 cm: sepolicy: Add contexts for cm recovery 
* Allow setup of secure adb (setup_adbd)

 * minivold in recovery

Change-Id: Id1243154f4016b59e54890404cadea46a2aad212
 2014-11-27 23:05:26 +00:00
Ricardo Cerqueira
49a30e7d17 Updates for CM12 2014-11-06 14:54:32 +00:00
Pawit Pornkitprasan
54c91b849c sepolicy: allow vold to mount fuse-based sdcard 
exfat and NTFS-3g requires access to /dev/fuse

Change-Id: I35b13ada586c8de3fbe04156c2d10bf5e3c07b3a
 2013-12-10 17:10:50 +07:00
Pawit Pornkitprasan
9a19f575a4 sepolicy: allow vold to mount ext4 sdcard 
When vold mounts an ext4 sdcard, it needs to force the context to
sdcard_external.

avc:  denied  { relabelfrom } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:labeledfs:s0 tclass=filesystem
avc:  denied  { relabelto } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem
avc:  denied  { relabelfrom } for  pid=190 comm=vold scontext=u:r:vold:s0 tcontext=u:object_r:sdcard_external:s0 tclass=filesystem

Change-Id: I80f42fbdf738dee10958ce1bdc1893a41234f0d9
 2013-11-15 10:02:25 +07:00
Pawit Pornkitprasan
ef907713b7 sepolicy: allow vold to create files on external sdcard 
This is required for ASEC support. Vold can already create and
access directories, but do not yet have the permission for files.

Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901
 2013-11-14 10:48:08 +07:00