commit 6002126f8859246250d2d371cbb67afd1ef294f6
author Jerry Zhang <zhangjerry@google.com> Tue May 15 21:35:43 2018 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Tue May 15 21:35:43 2018 +0000
tree a072f6995daead7e81b82e9f00ebf3cc1526be48
parent 175f23eca4866f74d430c45d16970d83095a3754
parent 31c4b4eabf9e866d34ad863394ba14d43cede78b

Merge "Allow mediaprovider to search /mnt/media_rw" into pi-dev

prebuilts/api/28.0/private/mediaprovider.te

diff --git a/prebuilts/api/28.0/private/mediaprovider.te b/prebuilts/api/28.0/private/mediaprovider.te
index fc6ec5a..f5c9f69 100644
--- a/prebuilts/api/28.0/private/mediaprovider.te
+++ b/prebuilts/api/28.0/private/mediaprovider.te
@@ -19,6 +19,8 @@
 dontaudit mediaprovider cache_private_backup_file:dir getattr;
 dontaudit mediaprovider cache_recovery_file:dir getattr;
 
+# Access external sdcards through /mnt/media_rw
+allow mediaprovider { mnt_media_rw_file }:dir search;
 
 allow mediaprovider app_api_service:service_manager find;
 allow mediaprovider audioserver_service:service_manager find;

private/mediaprovider.te

diff --git a/private/mediaprovider.te b/private/mediaprovider.te
index fc6ec5a..f5c9f69 100644
--- a/private/mediaprovider.te
+++ b/private/mediaprovider.te
@@ -19,6 +19,8 @@
 dontaudit mediaprovider cache_private_backup_file:dir getattr;
 dontaudit mediaprovider cache_recovery_file:dir getattr;
 
+# Access external sdcards through /mnt/media_rw
+allow mediaprovider { mnt_media_rw_file }:dir search;
 
 allow mediaprovider app_api_service:service_manager find;
 allow mediaprovider audioserver_service:service_manager find;