sepolicy/system_server.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

allow system_server recovery_cache_file:dir rw_dir_perms;
allow system_server recovery_cache_file:file create_file_perms;
allow system_server recovery_cache_file:fifo_file create_file_perms;

# Persistent properties
allow system_server persist_property_file:dir rw_dir_perms;
allow system_server persist_property_file:file { create_file_perms unlink };

allow system_server storage_stub_file:dir { getattr };

allow system_server media_rw_data_file:dir r_dir_perms;

# Allow system_server to relabel newly created theme directory for
# use by the proxied theme service
allow system_server themeservice_app_data_file:dir relabelto;