diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2014-07-08 14:45:09 -0400 |
|---|---|---|
| committer | Stephen Smalley <sds@tycho.nsa.gov> | 2014-07-08 19:27:40 +0000 |
| commit | 374b2a198a0b2872e32f4579337796a539fd168d (patch) | |
| tree | 8443ef08afe3f207139b357029ace0118d427acb /recovery.te | |
| parent | 65edb75d530058ec3c8cb86d6d3e28f9394740ba (diff) | |
| download | android_external_sepolicy-374b2a198a0b2872e32f4579337796a539fd168d.tar.gz android_external_sepolicy-374b2a198a0b2872e32f4579337796a539fd168d.tar.bz2 android_external_sepolicy-374b2a198a0b2872e32f4579337796a539fd168d.zip | |
Rename sdcard_internal/external types.
Rename sdcard_internal/external types to fuse and vfat
respectively to make it clear that they are assigned to any
fuse or vfat filesystem by default (absent a context= mount option)
and do not necessarily represent the SDcard.
The sdcard_type attribute is still assigned to both types and
can still be used in allow rules to permit access to either the
internal or external SDcard.
Define type aliases for the old names to preserve compatibility
on policy reload and for device-specific policies that may not yet
be updated.
Change-Id: I8d91a8c4c1342b94e4f1bb62ca7ffd2ca4b06ba1
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Diffstat (limited to 'recovery.te')
| -rw-r--r-- | recovery.te | 9 |
1 files changed, 3 insertions, 6 deletions
diff --git a/recovery.te b/recovery.te index 28c7f80..66aa3df 100644 --- a/recovery.te +++ b/recovery.te @@ -87,13 +87,10 @@ recovery_only(` # Use setfscreatecon() to label files for OTA updates. allow recovery self:process setfscreate; - # Allow recovery to create a fuse filesystem, and read files from - # it. (Note that all files on fuse filesystems are labeled - # "sdcard_internal"; the simulated SD card is the only other user of - # fuse.) + # Allow recovery to create a fuse filesystem, and read files from it. allow recovery fuse_device:chr_file rw_file_perms; - allow recovery sdcard_internal:dir r_dir_perms; - allow recovery sdcard_internal:file r_file_perms; + allow recovery fuse:dir r_dir_perms; + allow recovery fuse:file r_file_perms; wakelock_use(recovery) |