path: root/common/sepolicy/installd.te (plain)
blob: a7512496c4fb2768ed361e841cbd59fc0d7848ee

1	# Types extracted from seapp_contexts type= fields.
2	allow installd { media_data_file }:dir { create_dir_perms relabelfrom relabelto };
3	allow installd { media_data_file }:lnk_file { create setattr getattr unlink rename relabelfrom relabelto };
4	allow installd { media_data_file }:{ file sock_file fifo_file } { getattr unlink rename relabelfrom relabelto setattr };
5
6	allow installd media_data_file:dir { getattr read write open search setattr rmdir add_name relabelfrom relabelto};
7
8	allow installd self:capability sys_nice;