commit 9f152d98eaab9f85993a638394f280abc98e0d79
author Jerry Zhang <zhangjerry@google.com> Mon Apr 10 16:57:48 2017 -0700
committer Jerry Zhang <zhangjerry@google.com> Mon Apr 17 15:30:35 2017 -0700
tree d5bae02046c384137969a622b940e6d68ea9a5ab
parent 5ab5cfbae4e929a6616edc554a1239cc1eb66248

Split mediaprovider as a separate domain from priv_app

MediaProvider requires permissions that diverge from those
of a typical priv_app. This create a new domain and removes
Mtp related permissions from priv_app.

Bug: 33574909
Test: Connect with MTP, download apps and files, select ringtones
Test: DownloadProvider instrument tests, CtsProviderTestCases

Change-Id: I950dc11f21048c34af639cb3ab81873d2a6730a9

private/seapp_contexts

diff --git a/private/seapp_contexts b/private/seapp_contexts
index 4356889..dc7e389 100644
--- a/private/seapp_contexts
+++ b/private/seapp_contexts
@@ -102,6 +102,7 @@
 user=shared_relro domain=shared_relro
 user=shell seinfo=platform domain=shell type=shell_data_file
 user=_isolated domain=isolated_app levelFrom=user
+user=_app seinfo=media domain=mediaprovider name=android.process.media type=app_data_file levelFrom=user
 user=_app seinfo=platform domain=platform_app type=app_data_file levelFrom=user
 user=_app isV2App=true isEphemeralApp=true domain=ephemeral_app type=app_data_file levelFrom=user
 user=_app isV2App=true domain=untrusted_v2_app type=app_data_file levelFrom=user