diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2014-06-11 09:09:25 -0400 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2014-06-11 14:16:43 +0000 |
| commit | 89b9ff7e87a94128efba3e9f56fbd2d0dafa848a (patch) | |
| tree | ea34164b7f1846de9822a0dd3c664715c09cb095 | |
| parent | 42fb824ca9f3e46b4419f05083f2694ac67a8229 (diff) | |
| download | android_external_sepolicy-89b9ff7e87a94128efba3e9f56fbd2d0dafa848a.tar.gz android_external_sepolicy-89b9ff7e87a94128efba3e9f56fbd2d0dafa848a.tar.bz2 android_external_sepolicy-89b9ff7e87a94128efba3e9f56fbd2d0dafa848a.zip | |
Allow installd to chown/chmod app data files.
Addresses denials such as:
avc: denied { setattr } for comm="installd" name="com.android.calendar_preferences_no_backup.xml" dev="mmcblk0p28" ino=1499393 scontext=u:r:installd:s0 tcontext=u:object_r:app_data_file:s0 tclass=file avc: denied { setattr } for comm="installd" name="calendar_alerts.xml" dev="mmcblk0p28" ino=1499463 scontext=u:r:installd:s0 tcontext=u:object_r:app_data_file:s0 tclass=file
avc: denied { setattr } for comm="installd" name="_has_set_default_values.xml" dev="mmcblk0p28" ino=1499428 scontext=u:r:installd:s0 tcontext=u:object_r:app_data_file:s0 tclass=file
Change-Id: I0622f1a9d2b10e28be2616f91edf33bc048b4ac7
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
| -rw-r--r-- | installd.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/installd.te b/installd.te index 90564d1..586f426 100644 --- a/installd.te +++ b/installd.te @@ -70,4 +70,4 @@ allow installd system_data_file:notdevfile_class_set { getattr relabelfrom unlin # Types extracted from seapp_contexts type= fields. allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_data_file app_data_file }:dir { create_dir_perms relabelfrom relabelto }; allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_data_file app_data_file }:lnk_file { create setattr getattr unlink rename relabelfrom relabelto }; -allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_data_file app_data_file }:{ file sock_file fifo_file } { getattr unlink rename relabelfrom relabelto }; +allow installd { system_app_data_file bluetooth_data_file nfc_data_file radio_data_file shell_data_file app_data_file }:{ file sock_file fifo_file } { getattr unlink rename relabelfrom relabelto setattr }; |