summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2016-03-25 20:51:06 +0100
committerWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2016-03-25 21:27:49 +0100
commite292f77eff94cfb47673ff8bc6aaceaf9733d532 (patch)
treea4357a4463441ed6c6d73c0d0ab7fc4e7484273b
parent169608c87e18267ce9f5fd7fc12a754def1fda43 (diff)
downloaddevice_samsung_i9300-e292f77eff94cfb47673ff8bc6aaceaf9733d532.zip
device_samsung_i9300-e292f77eff94cfb47673ff8bc6aaceaf9733d532.tar.gz
device_samsung_i9300-e292f77eff94cfb47673ff8bc6aaceaf9733d532.tar.bz2
selinux: allow to write the firmware files from recovery mode
Change-Id: I061c9d67b171099a3c5cf21c5961e15a2bc114fc Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
-rw-r--r--selinux/recovery.te7
1 files changed, 7 insertions, 0 deletions
diff --git a/selinux/recovery.te b/selinux/recovery.te
new file mode 100644
index 0000000..531f480
--- /dev/null
+++ b/selinux/recovery.te
@@ -0,0 +1,7 @@
+recovery_only(`
+
+# firmware files
+allow recovery firmware_exynos:dir { create setattr relabelto relabelfrom };
+allow recovery firmware_exynos:file { create write open setattr relabelto relabelfrom };
+allow recovery firmware_mfc:file { create write open setattr relabelto relabelfrom };
+')