summaryrefslogtreecommitdiffstats
path: root/sepolicy/system_app.te
diff options
context:
space:
mode:
authorRicardo Cerqueira <cyanogenmod@cerqueira.org>2015-02-05 22:33:47 +0000
committerAbhisek Devkota <ciwrl@cyanogenmod.com>2015-02-11 19:44:43 +0000
commitc75446d072b7c3afed39eea52ece9af55cbc50f3 (patch)
tree1955f2fcc7bcebafecf8dd9e75f218d448fce977 /sepolicy/system_app.te
parent2ccd36c73f9baebf2749b33d43cafa8b016e633e (diff)
downloadvendor_replicant-c75446d072b7c3afed39eea52ece9af55cbc50f3.zip
vendor_replicant-c75446d072b7c3afed39eea52ece9af55cbc50f3.tar.gz
vendor_replicant-c75446d072b7c3afed39eea52ece9af55cbc50f3.tar.bz2
sepolicy: Split off /cache/recovery's permissions
/cache/recovery is used by 2 domains: recovery and updater apps. Separate its perms from the rest of /cache and grant them to those 2 clients Change-Id: Iacde60744c07423f9876c2f8e3da900543e38ddf
Diffstat (limited to 'sepolicy/system_app.te')
-rw-r--r--sepolicy/system_app.te4
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te
index 6c0e059..b843de8 100644
--- a/sepolicy/system_app.te
+++ b/sepolicy/system_app.te
@@ -1,3 +1,7 @@
# For performance settings
allow system_app sysfs_devices_system_cpu:file rw_file_perms;
allow system_app sysfs_devices_system_iosched:file rw_file_perms;
+
+# For the updaters
+allow system_app recovery_cache_file:dir {add_name rw_file_perms};
+allow system_app recovery_cache_file:file {create rw_file_perms};