diff options
| author | dhacker29 <dhackerdvm@gmail.com> | 2015-02-18 18:01:22 -0500 |
|---|---|---|
| committer | dhacker29 <dhackerdvm@gmail.com> | 2015-02-21 17:21:47 -0500 |
| commit | c552843f1a0cea6a56e4334573957ae13f0711ef (patch) | |
| tree | fde0e39b5e73c9f126ac8a4efda854051c79171b /sepolicy | |
| parent | da48ab89ac0bc4900ec2259f9293a00e841c644d (diff) | |
| download | vendor_replicant-c552843f1a0cea6a56e4334573957ae13f0711ef.zip vendor_replicant-c552843f1a0cea6a56e4334573957ae13f0711ef.tar.gz vendor_replicant-c552843f1a0cea6a56e4334573957ae13f0711ef.tar.bz2 | |
sepolicy: Allow CMUpdater/uncrypt access to recovery_cache_file
Change-Id: I514d128160ed4e04564077d7a2e2ad297af92e28
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/mac_permissions.xml | 7 | ||||
| -rw-r--r-- | sepolicy/seapp_contexts | 1 | ||||
| -rw-r--r-- | sepolicy/uncrypt.te | 2 |
3 files changed, 10 insertions, 0 deletions
diff --git a/sepolicy/mac_permissions.xml b/sepolicy/mac_permissions.xml index e91c6f4..184e356 100644 --- a/sepolicy/mac_permissions.xml +++ b/sepolicy/mac_permissions.xml @@ -14,4 +14,11 @@ <allow-all /> <seinfo value="release" /> </signer> + + <!-- CMUpdater --> + <signer signature="@RELEASE" > + <package name="com.cyanogenmod.updater" > + <seinfo value="cmupdater" /> + </package> + </signer> </policy> diff --git a/sepolicy/seapp_contexts b/sepolicy/seapp_contexts index bfad418..06c96d4 100644 --- a/sepolicy/seapp_contexts +++ b/sepolicy/seapp_contexts @@ -1,2 +1,3 @@ user=_app seinfo=platform name=com.cyanogenmod.filemanager domain=untrusted_app type=app_data_file user=theme_man domain=system_app type=system_data_file +user=_app seinfo=cmupdater name=com.cyanogenmod.updater domain=system_app type=system_app_data_file diff --git a/sepolicy/uncrypt.te b/sepolicy/uncrypt.te index 8fddf8a..2e545a7 100644 --- a/sepolicy/uncrypt.te +++ b/sepolicy/uncrypt.te @@ -1 +1,3 @@ r_dir_file(uncrypt, media_rw_data_file) +allow uncrypt recovery_cache_file:dir create_dir_perms; +allow uncrypt recovery_cache_file:file create_file_perms; |