summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-06-16 23:32:12 +0200
committerWolfgang Wiedmeyer <wolfgit@wiedmeyer.de>2017-06-16 23:32:12 +0200
commitf14027ae6be1470ea0ca863ea0487ee9029c5e28 (patch)
tree9eeef96c9dfbf40ea4f06d77b784e5f89f2d62f6
parentf02a8d59a5350dae22e1a580ba25f462612be567 (diff)
downloadvendor_replicant-f14027ae6be1470ea0ca863ea0487ee9029c5e28.tar.gz
vendor_replicant-f14027ae6be1470ea0ca863ea0487ee9029c5e28.tar.bz2
vendor_replicant-f14027ae6be1470ea0ca863ea0487ee9029c5e28.zip
sepolicy: set fsck_untrusted to permissive in recovery
Breaks installation from SD card in some cases otherwise. Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
-rw-r--r--sepolicy/recovery.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/recovery.te b/sepolicy/recovery.te
index c5f58c6e..5bd544f2 100644
--- a/sepolicy/recovery.te
+++ b/sepolicy/recovery.te
@@ -1,5 +1,8 @@
recovery_only(`
+# file system operations for sdcard
+permissive fsck_untrusted;
+
# Secure adb (setup_adbd)
allow adbd adb_keys_file:dir search;
allow recovery adb_keys_file:dir r_dir_perms;