commit f2db15b4e7c8d89b48cccdcd681b00a74965a137
author Marko Man <darkobas@gmail.com> Tue Jan 09 00:42:23 2018 +0100
committer Marko Man <darkobas@gmail.com> Wed Jan 10 22:31:59 2018 +0100
tree add7999a7e9068cc91a687de817350b4cf0b0071
parent 12f12109c9c5d855a20c332600002b13d6f5735e

vendor: sepolicy: add no fuse access for exfat and ntfs

Change-Id: I8da1c6396732ea7ce2f00237263a0e1a73216f54

sepolicy/fsck_untrusted.te

diff --git a/sepolicy/fsck_untrusted.te b/sepolicy/fsck_untrusted.te
index 0981fb2..c1ba526 100644
--- a/sepolicy/fsck_untrusted.te
+++ b/sepolicy/fsck_untrusted.te
@@ -11,3 +11,9 @@
 allow fsck_untrusted media_rw_data_file:dir { search getattr };
 allow fsck_untrusted tmpfs:dir { search };
 
+allow fsck_untrusted toolbox_exec:file entrypoint;
+allow fsck_untrusted toolbox_exec:file r_file_perms;
+allow fsck_untrusted exfat:filesystem mount;
+allow fsck_untrusted self:capability sys_rawio;
+allow fsck_untrusted ntfs:filesystem mount;
+