| Paul Crowley | 5b962cf | 2017-10-13 14:54:32 -0700 | [diff] [blame] | 1 | domain_auto_trans(vold, vold_prepare_subdirs_exec, vold_prepare_subdirs) |
| Jin Qian | c012533 | 2017-10-19 14:41:37 -0700 | [diff] [blame] | 2 | |
| Paul Crowley | 5850a2a | 2017-10-25 13:03:24 -0700 | [diff] [blame] | 3 | allow vold_prepare_subdirs system_file:file execute_no_trans; |
| 4 | allow vold_prepare_subdirs shell_exec:file rx_file_perms; |
| 5 | allow vold_prepare_subdirs toolbox_exec:file rx_file_perms; |
| 6 | allow vold_prepare_subdirs devpts:chr_file rw_file_perms; |
| 7 | allow vold_prepare_subdirs vold:fd use; |
| 8 | allow vold_prepare_subdirs vold:fifo_file { read write }; |
| 9 | allow vold_prepare_subdirs file_contexts_file:file r_file_perms; |
| Benjamin Gordon | 342362a | 2018-09-06 16:19:40 -0600 | [diff] [blame] | 10 | allow vold_prepare_subdirs self:global_capability_class_set { chown dac_override dac_read_search fowner }; |
| Paul Crowley | 5850a2a | 2017-10-25 13:03:24 -0700 | [diff] [blame] | 11 | allow vold_prepare_subdirs self:process setfscreate; |
| Jeff Vander Stoep | d25ccab | 2018-02-07 16:29:06 -0800 | [diff] [blame] | 12 | allow vold_prepare_subdirs { |
| 13 | system_data_file |
| 14 | vendor_data_file |
| Joel Galenson | 254a872 | 2018-04-16 14:50:38 -0700 | [diff] [blame] | 15 | }:dir { open read write add_name remove_name rmdir relabelfrom }; |
| Paul Crowley | 8096639 | 2018-04-26 13:41:13 -0700 | [diff] [blame] | 16 | allow vold_prepare_subdirs { |
| Kevin Chyn | 92bde4b | 2018-11-15 15:28:07 -0800 | [diff] [blame] | 17 | biometric_vendor_data_file |
| Paul Crowley | 8096639 | 2018-04-26 13:41:13 -0700 | [diff] [blame] | 18 | storaged_data_file |
| 19 | vold_data_file |
| 20 | }:dir { create_dir_perms relabelto }; |
| 21 | allow vold_prepare_subdirs { |
| Kevin Chyn | 92bde4b | 2018-11-15 15:28:07 -0800 | [diff] [blame] | 22 | biometric_vendor_data_file |
| Paul Crowley | 8096639 | 2018-04-26 13:41:13 -0700 | [diff] [blame] | 23 | storaged_data_file |
| 24 | system_data_file |
| 25 | vold_data_file |
| 26 | }:file { getattr unlink }; |