Merge "Allow shell and adbd access to media_rw_data_file for now." into nyc-dev
diff --git a/adbd.te b/adbd.te
index de0c981..27ffdd8 100644
--- a/adbd.te
+++ b/adbd.te
@@ -100,3 +100,7 @@
allow adbd storage_file:lnk_file r_file_perms;
allow adbd mnt_user_file:dir r_dir_perms;
allow adbd mnt_user_file:lnk_file r_file_perms;
+
+# Access to /data/media.
+allow adbd media_rw_data_file:dir create_dir_perms;
+allow adbd media_rw_data_file:file create_file_perms;
diff --git a/shell.te b/shell.te
index d1c385b..fc5c276 100644
--- a/shell.te
+++ b/shell.te
@@ -122,6 +122,10 @@
# Allow access to ion memory allocation device.
allow shell ion_device:chr_file rw_file_perms;
+# Access to /data/media.
+allow shell media_rw_data_file:dir create_dir_perms;
+allow shell media_rw_data_file:file create_file_perms;
+
###
### Neverallow rules
###