summaryrefslogtreecommitdiffstats
path: root/sepolicy/recovery.te
diff options
context:
space:
mode:
authorTom Marshall <tdm@cyngn.com>2014-11-26 13:26:14 -0800
committerGerrit Code Review <gerrit@cyanogenmod.org>2014-11-27 23:05:26 +0000
commit39a4244c7777a08c900743f8ef9a8fcf88fb7843 (patch)
tree209c8c79aba8bd4611d6406079d7bd01a2a72b2a /sepolicy/recovery.te
parentd22efb80e1bd1aea3710041fd6cd9b0dfd808149 (diff)
downloadvendor_replicant-39a4244c7777a08c900743f8ef9a8fcf88fb7843.zip
vendor_replicant-39a4244c7777a08c900743f8ef9a8fcf88fb7843.tar.gz
vendor_replicant-39a4244c7777a08c900743f8ef9a8fcf88fb7843.tar.bz2
cm: sepolicy: Add contexts for cm recovery
* Allow setup of secure adb (setup_adbd) * minivold in recovery Change-Id: Id1243154f4016b59e54890404cadea46a2aad212
Diffstat (limited to 'sepolicy/recovery.te')
-rw-r--r--sepolicy/recovery.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te
new file mode 100644
index 0000000..06bef3f
--- /dev/null
+++ b/sepolicy/recovery.te
@@ -0,0 +1,8 @@
+# Secure adb (setup_adbd)
+allow adbd adb_keys_file:dir search;
+allow recovery adb_keys_file:file r_file_perms;
+allow recovery shell_prop:property_service set;
+
+# Recovery dialogs
+unix_socket_connect(recovery, vold, vold)
+allow recovery tmpfs:sock_file create_file_perms;