diff options
| author | Nick Kralevich <nnk@google.com> | 2014-10-10 16:11:03 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2014-10-10 16:11:03 -0700 |
| commit | ebfd9f87197f4a39bbc2a5e4f6c6dffc28be36d7 (patch) | |
| tree | cfe0d857c32d7d79ddb9e0511f52852ef0b604a5 /drmserver.te | |
| parent | 2380d05f9791b6789b81e28ca8841df1b8b62c6d (diff) | |
| download | android_external_sepolicy-ebfd9f87197f4a39bbc2a5e4f6c6dffc28be36d7.tar.gz android_external_sepolicy-ebfd9f87197f4a39bbc2a5e4f6c6dffc28be36d7.tar.bz2 android_external_sepolicy-ebfd9f87197f4a39bbc2a5e4f6c6dffc28be36d7.zip | |
allow oemfs:dir search
mediaserver and drmserver both have permission to read oemfs
related files. However, there are no search permissions on the
directory, so the files would be unreachable.
Grant search permissions on the oemfs directory, so that the files
within that directory can be read.
Bug: 17954291
Change-Id: I9e36dc7b940bd46774753c1fa07b0f47c36ff0db
Diffstat (limited to 'drmserver.te')
| -rw-r--r-- | drmserver.te | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drmserver.te b/drmserver.te index b4d7416..7bc9e6a 100644 --- a/drmserver.te +++ b/drmserver.te @@ -48,4 +48,5 @@ allow drmserver radio_data_file:file { read getattr }; allow drmserver drmserver_service:service_manager add; # /oem access +allow drmserver oemfs:dir search; allow drmserver oemfs:file r_file_perms; |