commit 4c7044e0b1f0092d3334200d3817528600be323d
author Daichi Hirono <hirono@google.com> Wed Nov 09 15:27:59 2016 +0900
committer Daichi Hirono <hirono@google.com> Tue Nov 15 10:22:19 2016 +0900
tree 2ce57e382e1645f091fee8c1483da536afcd4af1
parent 41301ab74bb831b5219890cba2db7ef74de3cc57

Allow apps to search appfuse mount point and open a file on appfuse mount point.

Bug: 29970149
Test: None
Change-Id: I59f49f3bf20d93effde5e1a9a3c1ed64fbecb7a8

public/app.te

diff --git a/public/app.te b/public/app.te
index fe9ad52..a443bbc 100644
--- a/public/app.te
+++ b/public/app.te
@@ -249,7 +249,8 @@
 allow appdomain proc_meminfo:file r_file_perms;
 
 # For app fuse.
-allow appdomain app_fuse_file:file { getattr read append write };
+allow appdomain app_fuse_file:dir rw_dir_perms;
+allow appdomain app_fuse_file:file rw_file_perms;
 
 ###
 ### CTS-specific rules

public/priv_app.te

diff --git a/public/priv_app.te b/public/priv_app.te
index 04a0509..17b19cd 100644
--- a/public/priv_app.te
+++ b/public/priv_app.te
@@ -79,8 +79,6 @@
 # For AppFuse.
 allow priv_app vold:fd use;
 allow priv_app fuse_device:chr_file { read write };
-allow priv_app app_fuse_file:dir rw_dir_perms;
-allow priv_app app_fuse_file:file rw_file_perms;
 
 # /sys and /proc access
 r_dir_file(priv_app, sysfs_type)