summaryrefslogtreecommitdiffstats
path: root/selinux/mediaserver.te
diff options
context:
space:
mode:
authorrogersb11 <brettrogers11@gmail.com>2015-11-12 04:51:38 -0500
committerBrett Rogers <brettrogers11@gmail.com>2015-12-02 09:54:17 -0800
commit04de314e155a00e7299305c6f0ca05fd47045926 (patch)
tree6ca57022949b1aab04a7573b5b54a370ab4c5b96 /selinux/mediaserver.te
parent5b06fdd56bba9aeee7959794217d296c47d48945 (diff)
downloaddevice_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.tar.gz
device_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.tar.bz2
device_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.zip
Update sepolicy for M (WIP)
Change-Id: I668e299e7c6d9927144e3eedf59d559dfa8d0b23
Diffstat (limited to 'selinux/mediaserver.te')
-rw-r--r--selinux/mediaserver.te8
1 files changed, 7 insertions, 1 deletions
diff --git a/selinux/mediaserver.te b/selinux/mediaserver.te
index 65550ce..3241f66 100644
--- a/selinux/mediaserver.te
+++ b/selinux/mediaserver.te
@@ -6,4 +6,10 @@ allow mediaserver camera_data_file:file rw_file_perms;
allow mediaserver volume_data_file:file create_file_perms;
allow mediaserver volume_data_file:dir create_dir_perms;
allow mediaserver mfc_device:chr_file rw_file_perms;
-allow mediaserver system_data_file:file { write open };
+allow mediaserver system_data_file:file { execmod };
+allow mediaserver system_file:file { execmod };
+allow mediaserver mnt_user_file:lnk_file { read };
+allow mediaserver mnt_user_file:dir { search };
+allow mediaserver storage_file:lnk_file { read };
+allow mediaserver storage_file:dir { search };
+allow mediaserver log_device:chr_file { open write };