| author | xiaoliang.wang <xiaoliang.wang@amlogic.com> | 2017-10-16 14:50:42 (GMT) |
|---|---|---|
| committer | xiaoliang.wang <xiaoliang.wang@amlogic.com> | 2017-10-27 05:37:16 (GMT) |
| commit | 262e8964eeb3ceac491c84daf780a68fd2a8a95b (patch) | |
| tree | bae773089c4d23611d37abba0267bbd23f8a811b | |
| parent | f6d0bb2dfd87db23308ae6aea2c1c67fd9d88d67 (diff) | |
| download | amlogic-o-262e8964eeb3ceac491c84daf780a68fd2a8a95b.zip amlogic-o-262e8964eeb3ceac491c84daf780a68fd2a8a95b.tar.gz amlogic-o-262e8964eeb3ceac491c84daf780a68fd2a8a95b.tar.bz2 | |
Device: change system_app.te for FileListManager and add droidmount binder servic[5/5]
PD#152065
change system_app.te for FileListManager
Change-Id: Ie408e761803ae5b72dae2e9d1f09b8062717e9d9
| -rw-r--r-- | common/sepolicy/service_contexts | 1 | ||||
| -rw-r--r-- | common/sepolicy/system_app.te | 4 |
2 files changed, 4 insertions, 1 deletions
diff --git a/common/sepolicy/service_contexts b/common/sepolicy/service_contexts index 6c43c88..9617d41 100644 --- a/common/sepolicy/service_contexts +++ b/common/sepolicy/service_contexts @@ -7,3 +7,4 @@ tvservice u:object_r:tvserver_service:s0 media.screenmediasource u:object_r:screenmediasource_service:s0 tee_supplicant u:object_r:tee_service:s0 tv_remote u:object_r:tv_remote_service:s0 +droidmount u:object_r:mount_service:s0 diff --git a/common/sepolicy/system_app.te b/common/sepolicy/system_app.te index d48a6ec..c24b45c 100644 --- a/common/sepolicy/system_app.te +++ b/common/sepolicy/system_app.te @@ -24,7 +24,7 @@ allow system_app unlabeled:file { lock open read write getattr }; # /cache_file for dvb app creat update.zip file at /cache dir allow system_app cache_file:dir {create_dir_perms create_file_perms rw_file_perms}; -allow system_app cache_file:file {create_file_perms rw_file_perms}; +allow system_app cache_file:file {create_file_perms rw_file_perms getattr}; allow system_app log_file:dir { search read open getattr }; allow system_app log_file:file { read open getattr }; @@ -57,3 +57,5 @@ allow system_app exfat:file create_file_perms; allow system_app ntfs:dir create_dir_perms; allow system_app ntfs:file create_file_perms; + +allow system_app mnt_media_rw_file:dir r_dir_perms; |