From ec87bcd107d94950258a0c6ebb78bb56c09214c8 Mon Sep 17 00:00:00 2001 From: Wolfgang Wiedmeyer Date: Tue, 16 Feb 2016 22:50:47 +0100 Subject: selinux: allow to write the firmware files from the recovery also add gitignore Signed-off-by: Wolfgang Wiedmeyer --- .gitignore | 1 + selinux/recovery.te | 7 +++++++ 2 files changed, 8 insertions(+) create mode 100644 .gitignore create mode 100644 selinux/recovery.te diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..b25c15b --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +*~ diff --git a/selinux/recovery.te b/selinux/recovery.te new file mode 100644 index 0000000..531f480 --- /dev/null +++ b/selinux/recovery.te @@ -0,0 +1,7 @@ +recovery_only(` + +# firmware files +allow recovery firmware_exynos:dir { create setattr relabelto relabelfrom }; +allow recovery firmware_exynos:file { create write open setattr relabelto relabelfrom }; +allow recovery firmware_mfc:file { create write open setattr relabelto relabelfrom }; +') -- cgit v1.1