replicant-vendor_replicant/sepolicy/platform_app.te

15 lines
630 B
Plaintext

# Direct access to vold-mounted storage under /mnt/media_rw
# This is a performance optimization that allows platform apps to bypass the FUSE layer
allow platform_app sdcard_posix:dir create_dir_perms;
allow platform_app sdcard_posix:file create_file_perms;
# Allow Gallery3D to crop user images
allow platform_app system_app_data_file:file rw_file_perms;
# Allow Gallery3D to execute render scripts
allow platform_app app_data_file:file execute;
# Allow batterymanager and batteryproperties services to be found
allow platform_app battery_service:service_manager find;
allow platform_app healthd_service:service_manager find;