summaryrefslogtreecommitdiffstats
path: root/sepolicy/vold.te
blob: 9b7313c20886aa6b0459a41e829d91adde0562e2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
domain_trans(init, rootfs, vold)

# Allow vold to manage ASEC
allow vold sdcard_external:file create_file_perms;
allow vold vold_tmpfs:file create_file_perms;

# Allow vold to access fuse for fuse-based fs
allow vold fuse_device:chr_file rw_file_perms;

# NTFS-3g wants to drop permission
allow vold self:capability { setgid setuid };

# Vold can also run as minivold in the rootfs
recovery_only(`
  allow vold rootfs:dir { add_name write };
')