replicant-vendor_replicant/sepolicy/file.te
d34d 79eda9ebb8 sepolicy: Put theme service in its own context
Allow the theme manager and its data to be sandboxed in
its own context

Change-Id: I7898663d1c196bfe04fa4c539d20191a43fde284
2016-08-02 12:15:34 -07:00

20 lines
503 B
Plaintext

# Support asec containers getting mounted
allow file_type rootfs:filesystem associate;
type auditd_log, file_type, data_file_type;
# Themes
type themeservice_app_data_file, file_type, data_file_type;
# Performance settings
type sysfs_devices_system_iosched, file_type, sysfs_type;
# Recovery's "cache"
type recovery_cache_file, file_type, mlstrustedobject;
# Persistent property storage
type persist_property_file, file_type;
# Knobs for LiveDisplay
type livedisplay_sysfs, sysfs_type, file_type;