| Anton Hansson | edd13bc | 2018-10-23 16:50:51 +0100 | [diff] [blame] | 1 | type preloads_copy, domain, coredomain; |
| 2 | type preloads_copy_exec, system_file_type, exec_type, file_type; |
| 3 | |
| 4 | init_daemon_domain(preloads_copy) |
| 5 | |
| 6 | allow preloads_copy shell_exec:file rx_file_perms; |
| 7 | allow preloads_copy toolbox_exec:file rx_file_perms; |
| 8 | allow preloads_copy preloads_data_file:dir create_dir_perms; |
| 9 | allow preloads_copy preloads_data_file:file create_file_perms; |
| 10 | allow preloads_copy preloads_media_file:dir create_dir_perms; |
| 11 | allow preloads_copy preloads_media_file:file create_file_perms; |
| 12 | |
| 13 | # Allow to copy from /postinstall |
| 14 | allow preloads_copy system_file:dir r_dir_perms; |
| Bowgo Tsai | 35c2f10 | 2020-03-30 21:45:52 +0800 | [diff] [blame] | 15 | |
| 16 | # Silence the denial when /postinstall cannot be mounted, e.g., system_other |
| 17 | # is wiped, but preloads_copy.sh still runs. |
| 18 | dontaudit preloads_copy postinstall_mnt_dir:dir search; |