summaryrefslogtreecommitdiffstats
path: root/sepolicy
diff options
context:
space:
mode:
authorRicardo Cerqueira <ricardo@cyngn.com>2014-11-27 18:17:06 +0000
committerRicardo Cerqueira <ricardo@cyngn.com>2014-11-27 18:26:39 +0000
commitfa63e50707738ea1699b8b0672dbd873a3c12220 (patch)
tree964d95333979387b7420a5b948cb6bfd755a2387 /sepolicy
parent09159ac7ce037c0ae941acdeb5e3e1cda7193a39 (diff)
downloadvendor_replicant-fa63e50707738ea1699b8b0672dbd873a3c12220.zip
vendor_replicant-fa63e50707738ea1699b8b0672dbd873a3c12220.tar.gz
vendor_replicant-fa63e50707738ea1699b8b0672dbd873a3c12220.tar.bz2
selinux: Add a rule to label the extended keyhandler dex files
These should be treated as regular dex cache files, but they're expanded outside of the normal cache dir Change-Id: Id046e1b90116b35d2e7817ed4717fcef78135f08
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/file_contexts3
-rw-r--r--sepolicy/system.te1
2 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index dc770f2..7d7a2b4 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -19,3 +19,6 @@
# Superuser's control sockets
/dev/com.android.settings.daemon(/.*)? u:object_r:superuser_device:s0
/dev/com.android.settings(/.*)? u:object_r:superuser_device:s0
+
+# Expansion of these hooks is a bit unconventional
+/cache/com.cyanogenmod.keyhandler.dex u:object_r:dalvikcache_data_file:s0
diff --git a/sepolicy/system.te b/sepolicy/system.te
index 4c6de38..01972d4 100644
--- a/sepolicy/system.te
+++ b/sepolicy/system.te
@@ -1 +1,2 @@
allow system_server wallpaper_file:file relabelto;
+allow system_server dalvikcache_data_file:file write;