replicant-vendor_replicant/sepolicy/vold.te
Matt Mower 2806bc4f0c sepolicy: Additional filesystem perms for recovery
Change-Id: I66c785de7256ea64302a258af7c33cb717530343
2015-01-16 14:36:24 +00:00

16 lines
399 B
Plaintext

domain_trans(init, rootfs, vold)
# Allow vold to manage ASEC
allow vold sdcard_external:file create_file_perms;
# Allow vold to access fuse for fuse-based fs
allow vold fuse_device:chr_file rw_file_perms;
# NTFS-3g wants to drop permission
allow vold self:capability { setgid setuid };
# Vold can also run as minivold in the rootfs
recovery_only(`
allow vold rootfs:dir { add_name write };
')