| maxter | a22a372 | 2014-01-11 22:08:21 -0200 | [diff] [blame] | 1 | ########################### |
| 2 | # OmniROM common sepolicy |
| 3 | # |
| 4 | |
| 5 | # Allow vold to access fuse for fuse-based fs |
| 6 | allow vold fuse_device:chr_file rw_file_perms; |
| 7 | |
| 8 | # NTFS-3g wants to drop permission |
| 9 | allow vold self:capability { setgid setuid }; |
| 10 | |
| 11 | # Allow vold to relabel sdcard fs mounts |
| 12 | allow vold unlabeled:filesystem { relabelfrom }; |
| 13 | allow vold sdcard_external:filesystem { relabelfrom relabelto }; |
| Pawit Pornkitprasan | 7429567 | 2013-11-14 10:46:26 +0700 | [diff] [blame] | 14 | |
| 15 | # Allow vold to manage ASEC |
| 16 | allow vold sdcard_external:file create_file_perms; |
| Pawit Pornkitprasan | ae10bae | 2013-11-15 09:54:39 +0700 | [diff] [blame] | 17 | |
| 18 | # Allow vold to change context for mounted ext4 sdcard |
| 19 | relabelto_domain(vold) |
| 20 | allow vold labeledfs:filesystem { relabelfrom }; |
| 21 | allow vold sdcard_external:filesystem { relabelfrom relabelto }; |