commit b9bba83abcb98f7917d1cc2b739b9bfcbc019f7d
author Treehugger Robot <treehugger-gerrit@google.com> Thu Jun 22 21:01:23 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Thu Jun 22 21:01:25 2017 +0000
tree 43874394a103642d195102d6e53c828d62d684f7
parent 6acd70b91845e752227244f20a4eb921077dc16a
parent 8a65aeca0e7b1db3de3a29a51a68a778738d1208

Merge "Add rules for vfat for sdcardfs"

private/app.te

diff --git a/private/app.te b/private/app.te
index c87bd84..79adee0 100644
--- a/private/app.te
+++ b/private/app.te
@@ -207,8 +207,8 @@
 allow { appdomain -isolated_app -ephemeral_app } sdcardfs:file create_file_perms;
 # This should be removed if sdcardfs is modified to alter the secontext for its
 # accesses to the underlying FS.
-allow { appdomain -isolated_app -ephemeral_app } media_rw_data_file:dir create_dir_perms;
-allow { appdomain -isolated_app -ephemeral_app } media_rw_data_file:file create_file_perms;
+allow { appdomain -isolated_app -ephemeral_app } { media_rw_data_file vfat }:dir create_dir_perms;
+allow { appdomain -isolated_app -ephemeral_app } { media_rw_data_file vfat }:file create_file_perms;
 
 # Access OBBs (vfat images) mounted by vold (b/17633509)
 # File write access allowed for FDs returned through Storage Access Framework