Define types for an OEM-provided filesystem.

Bug: 13340779 Change-Id: I6151b6b61ddf90327d51815d13fd65be561be587

Define types for an OEM-provided filesystem.
Bug: 13340779 Change-Id: I6151b6b61ddf90327d51815d13fd65be561be587
6736bac2 · Jeff Sharkey · Jeff Sharkey · fd783d1b · 6736bac2 · 6736bac2
Commit 6736bac2 authored 11 years ago by Jeff Sharkey Committed by Jeff Sharkey 11 years ago
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

app.te app.te +4 -0

file.te file.te +1 -0

No files found.
--- a/app.te
+++ b/app.te
@@ -52,6 +52,10 @@ allow appdomain app_data_file:notdevfile_class_set create_file_perms;
 allow appdomain system_data_file:dir r_dir_perms;
 allow appdomain system_data_file:file { execute execute_no_trans open };

+# Access to OEM provided data and apps
+allow appdomain oemfs:dir r_dir_perms;
+allow appdomain oemfs:file rx_file_perms;
+
 # Execute the shell or other system executables.
 allow appdomain shell_exec:file rx_file_perms;
 allow appdomain system_file:file rx_file_perms;

--- a/file.te
+++ b/file.te
@@ -33,6 +33,7 @@ type sdcard_external, sdcard_type, fs_type, mlstrustedobject;
 type debugfs, fs_type, mlstrustedobject;
 type pstorefs, fs_type;
 type functionfs, fs_type;
+type oemfs, fs_type;

 # File types
 type unlabeled, file_type;