commit e7c8f0425d6a40f58b6d00d88130e8cb7ecb82f6
author Martijn Coenen <maco@google.com> Fri Feb 07 10:29:14 2020 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Feb 07 10:29:14 2020 +0000
tree 3394855525b69289bc1ad80c1fcc5db4c9c8e40b
parent 3d44d91d0b32dd9b90c98bd82eae5db60ca097c5
parent 127f5e863cba3bc152249370f398192abfba8966

Merge "Allow vold FS_IOC_{GET|SET}FLAGS ioctl."

public/vold.te

diff --git a/public/vold.te b/public/vold.te
index 0ffa119..07630de 100644
--- a/public/vold.te
+++ b/public/vold.te
@@ -96,9 +96,12 @@
 allow vold media_rw_data_file:dir mounton;
 
 # Allow setting extended attributes (for project quota IDs) on files and dirs
+# and to enable project ID inheritance through FS_IOC_SETFLAGS
 allowxperm vold media_rw_data_file:{ dir file } ioctl {
   FS_IOC_FSGETXATTR
   FS_IOC_FSSETXATTR
+  FS_IOC_GETFLAGS
+  FS_IOC_SETFLAGS
 };
 
 # Allow mounting of storage devices