summaryrefslogtreecommitdiffstats
path: root/sepolicy
diff options
context:
space:
mode:
authorcodeworkx <codeworkx@cyanogenmod.org>2016-03-05 18:05:05 +0100
committerSteve Kondik <shade@chemlab.org>2016-03-16 15:48:15 -0700
commitb7c8dec762fa745dd1c06d2a8a007cfec31128b2 (patch)
treeb180f95950d779b36fb1038672f39b3ca5cbdce9 /sepolicy
parentf3610f55e70cbd9f6cfbb20e6fcdb3c6eeca77a9 (diff)
downloadvendor_replicant-b7c8dec762fa745dd1c06d2a8a007cfec31128b2.zip
vendor_replicant-b7c8dec762fa745dd1c06d2a8a007cfec31128b2.tar.gz
vendor_replicant-b7c8dec762fa745dd1c06d2a8a007cfec31128b2.tar.bz2
cm: sepolicy: allow platform apps to crop user images
Needed for gallery3d when setting contact pics avc: denied { write } for comm=4173796E635461736B202334 path="/data/data/com.android.settings/cache/CropEditUserPhoto.jpg" dev="mmcblk0p50" ino=65849 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:system_app_data_file:s0 tclass=file permissive=0 03-05 13:07:40.741 22060-22207/com.android.gallery3d W/System.err﹕ java.io.IOException: write failed: EACCES (Permission denied) Change-Id: Iaa7f75abfd41c86e1a321d5f35b950f9dc7eb930
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/platform_app.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/platform_app.te b/sepolicy/platform_app.te
index db8647d..bbd4dd4 100644
--- a/sepolicy/platform_app.te
+++ b/sepolicy/platform_app.te
@@ -2,3 +2,6 @@
# This is a performance optimization that allows platform apps to bypass the FUSE layer
allow platform_app sdcard_posix:dir create_dir_perms;
allow platform_app sdcard_posix:file create_file_perms;
+
+# Allow Gallery3D to crop user images
+allow platform_app system_app_data_file:file rw_file_perms;