summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-02-15 01:43:16 +0100
committerWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-02-15 01:43:16 +0100
commit36ee6d2a5860337db80286d919a8f8135f137e89 (patch)
tree8d0c830c43a349fbcc01fe093e53c6f4541c543f
parent375710464d4c20909f748804e9d883929b0b28e2 (diff)
downloaddevice_samsung_galaxys2-common-36ee6d2a5860337db80286d919a8f8135f137e89.zip
device_samsung_galaxys2-common-36ee6d2a5860337db80286d919a8f8135f137e89.tar.gz
device_samsung_galaxys2-common-36ee6d2a5860337db80286d919a8f8135f137e89.tar.bz2
selinux: allow to install the mfc firmware in recovery
Fixes a denial during update installation. Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
-rw-r--r--selinux/recovery.te5
1 files changed, 5 insertions, 0 deletions
diff --git a/selinux/recovery.te b/selinux/recovery.te
new file mode 100644
index 0000000..3a41f0c
--- /dev/null
+++ b/selinux/recovery.te
@@ -0,0 +1,5 @@
+recovery_only(`
+
+# mfc firmware
+allow recovery firmware_mfc:file { create write open setattr relabelto relabelfrom };
+')