n7100: Bring in Selinux for M

* commits picked up from the i9300 device repo and made a few changes for n7100

credits to keepcalm444

1 files changed, 12 insertions, 0 deletions

diff --git a/selinux/vold.te b/selinux/vold.te
new file mode 100644
index 0000000..ba429d6
--- /dev/null
+++ b/selinux/vold.te
@@ -0,0 +1,12 @@
+allow vold kernel:process setsched;
+allow vold sdcardd_exec:file { read open execute execute_no_trans };
+
+allow vold log_device:dir search;
+allow vold storage_stub_file:dir { read open search write add_name };
+allow vold mnt_media_rw_stub_file:dir { read open };
+allow vold blkid_exec:file { getattr execute read open execute_no_trans };
+
+allow vold log_device:chr_file { write open };
+
+allow vold efs_device_file:dir rw_file_perms;
+allow vold efs_device_file:file rw_file_perms;