replicant-vendor_replicant/sepolicy/file.te
Ricardo Cerqueira c75446d072 sepolicy: Split off /cache/recovery's permissions
/cache/recovery is used by 2 domains: recovery and updater apps. Separate
its perms from the rest of /cache and grant them to those 2 clients

Change-Id: Iacde60744c07423f9876c2f8e3da900543e38ddf
2015-02-11 19:44:43 +00:00

14 lines
350 B
Plaintext

# Support asec containers getting mounted
allow file_type rootfs:filesystem associate;
type auditd_log, file_type, data_file_type;
# Themes
type theme_data_file, file_type, data_file_type;
# Performance settings
type sysfs_devices_system_iosched, file_type, sysfs_type;
# Recovery's "cache"
type recovery_cache_file, file_type, mlstrustedobject;