commit ae079b88bbe7527523fb92f651f759c3db1c3ba6
author Treehugger Robot <treehugger-gerrit@google.com> Wed Oct 10 15:39:59 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Oct 10 15:39:59 2018 +0000
tree bd5287f6feddc7836ace36c15ffe64825438a841
parent 5d4a119233091962d54abf0c654bb792a17e602c
parent ebc3a1a34ce914654fcc4edf9a2d26bf5fa76260

Merge "Move to ioctl whitelisting for plain files / directories"

public/kernel.te

diff --git a/public/kernel.te b/public/kernel.te
index 3a440eb..d20bc47 100644
--- a/public/kernel.te
+++ b/public/kernel.te
@@ -79,7 +79,7 @@
 allow kernel media_rw_data_file:file create_file_perms;
 
 # Access to /data/misc/vold/virtual_disk.
-allow kernel vold_data_file:file read;
+allow kernel vold_data_file:file { read write };
 
 # Allow the first-stage init (which is running in the kernel domain) to execute the
 # dynamic linker when it re-executes /init to switch into the second stage.