summaryrefslogtreecommitdiffstats
path: root/sepolicy/recovery.te
Commit message (Collapse)AuthorAgeFilesLines
* sepolicy: set fsck_untrusted to permissive in recoveryWolfgang Wiedmeyer2017-06-161-0/+3
| | | | | | Breaks installation from SD card in some cases otherwise. Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
* sepolicy: Allow recovery to mount on tmpfsPat Erley2016-04-221-0/+1
| | | | | | | | | | | | | | /storage is a tmpfs volume, and is where updater stores its zip when downloading updates. Devices with emmc partitions that are used as 'sdcard' volumes will end up with paths like: /storage/UUID/...../update.zip where UUID is the mount point for the partition and update.zip is the downloaded update. With this change, minivold can create the UUID folder and mount onto it, fixing the application of updates. Change-Id: I4fa84fd590f5ff0f91e38c49cef0c179728fdf43
* recovery: Add new rule for sys.usb.ffs.readyAdrianDC2016-02-231-0/+3
| | | | | | | | init: avc: denied { set } for property=sys.usb.ffs.ready scontext=u:r:recovery:s0 tcontext=u:object_r:ffs_prop:s0 tclass=property_service Change-Id: Id3441ccc3c6a8915a5fdf50efd8c617d1242868a
* recovery: Add new rules for recursive wipePat Erley2016-01-281-0/+4
| | | | | | | We now use a temporary context when mounting /data, so add permissions to do that, and add permissions necessary to do the recursive wipe. Change-Id: Ic925c70f1cf01c8b19a6ac48a9468d6eb9205321
* sepolicy: Allow recovery to create links in the rootfsSteve Kondik2015-11-261-0/+1
| | | | | | * Needed to support vold and other new code. Change-Id: I25a0b1cc6461eced7112dd4b3974a71423f7957b
* sepolicy: Allow recovery to set system propertiesSteve Kondik2015-08-051-0/+2
| | | | | | * This is used by extremely critical things. Change-Id: Ie529851469408adac1e081fe4f6dc5daa9002933
* sepolicy: recovery: Allow data file writeTom Marshall2015-03-101-1/+1
| | | | | | Needed to preserve /data/.layout_version (aka nesting bug fix). Change-Id: Iaae982223e80ad10479cf1ca3db09da7ada5663e
* sepolicy: Split off /cache/recovery's permissionsRicardo Cerqueira2015-02-111-0/+4
| | | | | | | /cache/recovery is used by 2 domains: recovery and updater apps. Separate its perms from the rest of /cache and grant them to those 2 clients Change-Id: Iacde60744c07423f9876c2f8e3da900543e38ddf
* sepolicy: Additional filesystem perms for recoveryMatt Mower2015-01-161-2/+6
| | | | Change-Id: I66c785de7256ea64302a258af7c33cb717530343
* selinux: Allow recovery to do recursive deletesRicardo Cerqueira2015-01-031-0/+7
| | | | | | | Our partial wipes (preserving media) require that recovery can rmdir dirs and getattr files Change-Id: I206f74131f9a37c5887ef30062adeabb58beaa3a
* sepolicy: allow recovery read access to /data/media/ files and dirsDan Pasanen2014-12-141-0/+4
| | | | Change-Id: I41173d72e86f9cf4d79f7c46166eeb71dc19d2f4
* sepolicy: More rules for recoverySteve Kondik2014-12-091-0/+15
| | | | Change-Id: Ie50c04eb83cb9c62f679a1c1aa2ac482af159f7e
* cm: sepolicy: Add contexts for cm recoveryTom Marshall2014-11-271-0/+8
* Allow setup of secure adb (setup_adbd) * minivold in recovery Change-Id: Id1243154f4016b59e54890404cadea46a2aad212
generated by cgit v1.1 at 2024-05-23 10:04:47 +0000