sepolicy/platform_app.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14

# Direct access to vold-mounted storage under /mnt/media_rw
# This is a performance optimization that allows platform apps to bypass the FUSE layer
allow platform_app sdcard_posix:dir create_dir_perms;
allow platform_app sdcard_posix:file create_file_perms;

# Allow Gallery3D to crop user images
allow platform_app system_app_data_file:file rw_file_perms;

# Allow Gallery3D to execute render scripts
allow platform_app app_data_file:file execute;

# Allow batterymanager and batteryproperties services to be found
allow platform_app battery_service:service_manager find;
allow platform_app healthd_service:service_manager find;