summaryrefslogtreecommitdiffstats
path: root/sepolicy
diff options
context:
space:
mode:
authorPat Erley <perley@cyngn.com>2016-05-09 14:36:29 -0700
committerGerrit Code Review <gerrit@cyanogenmod.org>2016-05-16 13:29:06 -0700
commitca2061460cb1570fb7f5cb3a3c977d41681daa3b (patch)
tree26c81f54869211b384d703c25c7147f9fc28ca4b /sepolicy
parent603ce3ba3e7ee1b7ae8af9851699b4c2f8bac2db (diff)
downloadvendor_replicant-ca2061460cb1570fb7f5cb3a3c977d41681daa3b.zip
vendor_replicant-ca2061460cb1570fb7f5cb3a3c977d41681daa3b.tar.gz
vendor_replicant-ca2061460cb1570fb7f5cb3a3c977d41681daa3b.tar.bz2
sepolicy: Allow uncrypt additional access
Uncrypt may need access to additional selinux contexts for devices with created storage solutions. Change-Id: Ie90f130ff6bafdd195379f7d57504b2fce4ef830
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/uncrypt.te5
1 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/uncrypt.te b/sepolicy/uncrypt.te
index 978f9e1..2697595 100644
--- a/sepolicy/uncrypt.te
+++ b/sepolicy/uncrypt.te
@@ -2,3 +2,8 @@ r_dir_file(uncrypt, media_rw_data_file)
allow uncrypt recovery_cache_file:dir create_dir_perms;
allow uncrypt recovery_cache_file:file create_file_perms;
allow uncrypt recovery_cache_file:fifo_file rw_file_perms;
+
+allow uncrypt storage_file:dir r_dir_perms;
+allow uncrypt storage_stub_file:dir r_dir_perms;
+allow uncrypt fuse:dir r_dir_perms;
+allow uncrypt fuse:file r_file_perms;