diff options
Diffstat (limited to 'init.te')
-rw-r--r-- | init.te | 12 |
1 files changed, 12 insertions, 0 deletions
@@ -234,6 +234,18 @@ allow init metadata_block_device:blk_file rw_file_perms; allow init pstorefs:dir search; allow init pstorefs:file r_file_perms; +# linux keyring configuration +allow init init:key { write search setattr }; + +# Allow init to link temp fs to unencrypted data on userdata +allow init tmpfs:lnk_file { create read getattr relabelfrom }; + +# Allow init to manipulate /data/unencrypted +allow init unencrypted_data_file:{ file lnk_file } create_file_perms; +allow init unencrypted_data_file:dir create_dir_perms; + +unix_socket_connect(init, vold, vold) + ### ### neverallow rules ### |