selinux/vold.te


1
2
3
4
5
6
7
8
9
10
11
12

allow vold kernel:process setsched;
allow vold sdcardd_exec:file { read open execute execute_no_trans };

allow vold log_device:dir search;
allow vold storage_stub_file:dir { read open search write add_name };
allow vold mnt_media_rw_stub_file:dir { read open };
allow vold blkid_exec:file { getattr execute read open execute_no_trans };

allow vold log_device:chr_file { write open };

allow vold efs_device_file:dir rw_file_perms;
allow vold efs_device_file:file rw_file_perms;