commit 47e18130fd9769e9c435f2ed2cd5eff9d0b4844e
author Kiyoung Kim <kiyoungkim@google.com> Tue Feb 04 10:46:49 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Feb 04 10:46:49 2020 +0000
tree a385ad7eeded61b9d06991e44fa4b0f211cbb35f
parent 4de3228c461d54752a5ca0d011ffc13686e0a3cb
parent 7e247cb035aaecf922c6747475fa6c45b5854add

Merge "Don't audit linkerconfig in dumpstate"

public/toolbox.te

diff --git a/public/toolbox.te b/public/toolbox.te
index 2ff9d3d..1dd06f9 100644
--- a/public/toolbox.te
+++ b/public/toolbox.te
@@ -28,6 +28,11 @@
 allow toolbox system_data_file:dir { rmdir rw_dir_perms };
 allow toolbox system_data_file:file { getattr unlink };
 
-# chattr +F /data/media in init
+# chattr +F and chattr +P /data/media in init
 allow toolbox media_rw_data_file:dir { r_dir_perms };
-allowxperm toolbox media_rw_data_file:dir ioctl { FS_IOC_SETFLAGS FS_IOC_GETFLAGS };
+allowxperm toolbox media_rw_data_file:dir ioctl {
+  FS_IOC_FSGETXATTR
+  FS_IOC_FSSETXATTR
+  FS_IOC_GETFLAGS
+  FS_IOC_SETFLAGS
+};