commit 2ad229c7886b7cc4534eadbad4ef47d07bc6f69a
author Narayan Kamath <narayan@google.com> Mon Jan 14 15:02:12 2019 +0000
committer Narayan Kamath <narayan@google.com> Wed Jan 16 15:22:51 2019 +0000
tree c69b7cdf4ec21abd982c25ede8368ebc0bca97c6
parent 6d53efcf468e13be3fa08ec5055a6f7e2e934a42

Add initial sepolicy for app data snapshots.

Define a rollback_data_file label and apply it to the snapshots
directory. This change contains just enough detail to allow
vold_prepare_subdirs to prepare these directories correctly.

A follow up change will flesh out the access policy on these
directories in more detail.

Test: make, manual
Bug: 112431924

Change-Id: I4fa7187d9558697016af4918df6e34aac1957176

private/vold_prepare_subdirs.te

diff --git a/private/vold_prepare_subdirs.te b/private/vold_prepare_subdirs.te
index e93e1e5..09d0ca9 100644
--- a/private/vold_prepare_subdirs.te
+++ b/private/vold_prepare_subdirs.te
@@ -17,6 +17,7 @@
     face_vendor_data_file
     fingerprint_vendor_data_file
     iris_vendor_data_file
+    rollback_data_file
     storaged_data_file
     vold_data_file
 }:dir { create_dir_perms relabelto };
@@ -24,6 +25,7 @@
     face_vendor_data_file
     fingerprint_vendor_data_file
     iris_vendor_data_file
+    rollback_data_file
     storaged_data_file
     system_data_file
     vold_data_file