diff options
author | Geremy Condra <gcondra@google.com> | 2013-10-09 17:55:45 -0700 |
---|---|---|
committer | Geremy Condra <gcondra@google.com> | 2013-10-09 18:36:29 -0700 |
commit | 4fc702eccf2c427a44da4b02342250094ab61192 (patch) | |
tree | f3eb9aed9c120b60858d849a7325eeecf8daf34e | |
parent | a5d0ac440b7b0cdc84d8ad6b9c9451b4042f7b48 (diff) | |
download | android_external_sepolicy-4fc702eccf2c427a44da4b02342250094ab61192.tar.gz android_external_sepolicy-4fc702eccf2c427a44da4b02342250094ab61192.tar.bz2 android_external_sepolicy-4fc702eccf2c427a44da4b02342250094ab61192.zip |
DO NOT MERGE Fix denials seen during device upgrade.
Fixes:
denied { relabelto } for pid=721 comm="PackageManager" name="vmdl-112554949.tmp" dev="mmcblk0p30" ino=712747 scontext=u:r:system:s0 tcontext=u:object_r:apk_private_tmp_file:s0 tclass=file
denied { create } for pid=240 comm="vold" name="smdl2tmp1.asec" scontext=u:r:vold:s0 tcontext=u:object_r:system_data_file:s0 tclass=file
Bug: 11149726
Change-Id: Iddc7592c757375a961f0d392c27622073c141b36
-rw-r--r-- | system.te | 1 | ||||
-rw-r--r-- | vold.te | 1 |
2 files changed, 2 insertions, 0 deletions
@@ -16,3 +16,4 @@ allow system backup_data_file:dir relabelto; allow system cache_backup_file:dir relabelto; allow system apk_data_file:file relabelto; allow system apk_tmp_file:file relabelto; +allow system apk_private_tmp_file:file relabelto; @@ -50,6 +50,7 @@ allow vold efs_file:file rw_file_perms; # Create and mount on /data/tmp_mnt. allow vold system_data_file:dir { create rw_dir_perms mounton }; +allow vold system_data_file:file create_file_perms; # Set scheduling policy of kernel processes allow vold kernel:process setsched; |