aboutsummaryrefslogtreecommitdiffstats
path: root/untrusted_app.te
diff options
context:
space:
mode:
authorPawit Pornkitprasan <p.pawit@gmail.com>2014-12-11 22:33:49 +0700
committerPawit Pornkitprasan <p.pawit@gmail.com>2014-12-12 13:58:39 +0700
commitc06ed8f7b26af01132db6d09ebf69807d09aa8bf (patch)
tree9d8ac944a47fbb011831faecfaf9a69a0922c818 /untrusted_app.te
parentfc6214bf5d571c4d8d364538b8160628dc380c5c (diff)
downloadandroid_external_sepolicy-c06ed8f7b26af01132db6d09ebf69807d09aa8bf.tar.gz
android_external_sepolicy-c06ed8f7b26af01132db6d09ebf69807d09aa8bf.tar.bz2
android_external_sepolicy-c06ed8f7b26af01132db6d09ebf69807d09aa8bf.zip
sepolicy: allow system apps to access ASEC
Required for Settings to show name/icon of apps on sd card (permission copied from untrusted_app) Also removed duplicate permission (from domain) in untrusted_app Change-Id: Ib2b3bee4dfb54ad5e45b392fd9bfd65add4a00bf
Diffstat (limited to 'untrusted_app.te')
-rw-r--r--untrusted_app.te1
1 files changed, 0 insertions, 1 deletions
diff --git a/untrusted_app.te b/untrusted_app.te
index 2b2a2e7..3fd4a40 100644
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -32,7 +32,6 @@ allow untrusted_app app_data_file:file { rx_file_perms execmod };
allow untrusted_app tun_device:chr_file rw_file_perms;
# ASEC
-allow untrusted_app asec_apk_file:dir { getattr };
allow untrusted_app asec_apk_file:file r_file_perms;
# Execute libs in asec containers.
allow untrusted_app asec_public_file:file { execute execmod };