Skip to content
Snippets Groups Projects
  • Stephen Smalley's avatar
    cf610692
    Only allow app domains to access SDcard via fuse mount. · cf610692
    Stephen Smalley authored
    
    sdcard_internal is assigned to fuse mounts while sdcard_external
    is assigned to vfat mounts by genfs_contexts.  Originally we
    allowed access to both via the sdcard_type attribute, and access
    via both means was required.  IIUC however, in 4.4 and later,
    SDcard access should always occur via the fuse mount and we can
    drop access to sdcard_external.
    
    I think we can do the same for all domains except sdcardd.  However,
    I cannot test this as the Nexus devices do not have external SDcard
    support.
    
    Also wondering if we should rename sdcard_internal type to fuse
    and sdcard_external type to vfat to more clearly represent their
    meaning, since one accesses the external SDcard via the fuse mount now.
    
    Change-Id: Ie44221e9eea90e627a48df5398c456b86293f724
    Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
    cf610692
    History
    Only allow app domains to access SDcard via fuse mount.
    Stephen Smalley authored
    
    sdcard_internal is assigned to fuse mounts while sdcard_external
    is assigned to vfat mounts by genfs_contexts.  Originally we
    allowed access to both via the sdcard_type attribute, and access
    via both means was required.  IIUC however, in 4.4 and later,
    SDcard access should always occur via the fuse mount and we can
    drop access to sdcard_external.
    
    I think we can do the same for all domains except sdcardd.  However,
    I cannot test this as the Nexus devices do not have external SDcard
    support.
    
    Also wondering if we should rename sdcard_internal type to fuse
    and sdcard_external type to vfat to more clearly represent their
    meaning, since one accesses the external SDcard via the fuse mount now.
    
    Change-Id: Ie44221e9eea90e627a48df5398c456b86293f724
    Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>