| maxwen | 85c37d6 | 2016-02-26 03:45:57 +0100 | [diff] [blame] | 1 | # External storage |
| 2 | allow fsck_untrusted self:capability sys_admin; |
| Marko Man | 6ca2827 | 2016-10-20 01:36:14 +0200 | [diff] [blame] | 3 | |
| 4 | #OTG Mount |
| 5 | allow fsck_untrusted mnt_media_rw_stub_file:dir { rw_file_perms mounton }; |
| 6 | allow fsck_untrusted mnt_media_rw_file:dir rw_dir_perms; |
| 7 | allow fsck_untrusted mnt_media_rw_file:file rw_file_perms; |
| 8 | allow fsck_untrusted fuse_device:chr_file { read write open getattr }; |
| 9 | allow fsck_untrusted fuse_device:filesystem mount; |
| maxwen | ec69d12 | 2018-01-02 01:02:33 +0100 | [diff] [blame] | 10 | allow fsck_untrusted block_device:dir getattr; |
| 11 | allow fsck_untrusted media_rw_data_file:dir { search getattr }; |
| 12 | allow fsck_untrusted tmpfs:dir { search }; |
| Marko Man | 6ca2827 | 2016-10-20 01:36:14 +0200 | [diff] [blame] | 13 | |
| Marko Man | f2db15b | 2018-01-09 00:42:23 +0100 | [diff] [blame^] | 14 | allow fsck_untrusted toolbox_exec:file entrypoint; |
| 15 | allow fsck_untrusted toolbox_exec:file r_file_perms; |
| 16 | allow fsck_untrusted exfat:filesystem mount; |
| 17 | allow fsck_untrusted self:capability sys_rawio; |
| 18 | allow fsck_untrusted ntfs:filesystem mount; |
| 19 | |