diff --git a/private/file_contexts b/private/file_contexts index 2e78b80aea77f68d987a9256f0ff55b406d5ccad..264735d6d7ca9b1d45aba4408bb92f62e69eab3e 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -535,6 +535,7 @@ # Overlayfs support directories # /cache/overlay(/.*)? u:object_r:overlayfs_file:s0 +/mnt/scratch(/.*)? u:object_r:overlayfs_file:s0 /data/cache(/.*)? u:object_r:cache_file:s0 /data/cache/recovery(/.*)? u:object_r:cache_recovery_file:s0 diff --git a/private/file_contexts_overlayfs b/private/file_contexts_overlayfs index 00902c2daf640ca56d838c34bdf89f513b386fb8..e472fade565924ccdc1d43e23d8c3908c57f9a2e 100644 --- a/private/file_contexts_overlayfs +++ b/private/file_contexts_overlayfs @@ -4,3 +4,6 @@ /cache/overlay/(system|product)/upper u:object_r:system_file:s0 /cache/overlay/(vendor|odm)/upper u:object_r:vendor_file:s0 /cache/overlay/oem/upper u:object_r:vendor_file:s0 +/mnt/scratch/overlay/(system|product)/upper u:object_r:system_file:s0 +/mnt/scratch/overlay/(vendor|odm)/upper u:object_r:vendor_file:s0 +/mnt/scratch/overlay/oem/upper u:object_r:vendor_file:s0 diff --git a/public/file.te b/public/file.te index 016807ee760199e53698d2d1ac233d71dacb15b5..b0e36a6288728b51bb72b9043557fb79ef757ea6 100644 --- a/public/file.te +++ b/public/file.te @@ -310,7 +310,7 @@ type system_app_data_file, file_type, data_file_type, core_data_file_type, mlstr # Compatibility with type name used in Android 4.3 and 4.4. # Default type for anything under /cache type cache_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; -# Type for /cache/overlay +# Type for /cache/overlay /mnt/scratch/overlay type overlayfs_file, file_type, data_file_type, core_data_file_type; # Type for /cache/backup_stage/* (fd interchange with apps) type cache_backup_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; diff --git a/public/init.te b/public/init.te index c337c82ae33db0e16512a857143a6cbd644caa19..42d364f02fbf2ddead6f9a4a752b4055a0a07786 100644 --- a/public/init.te +++ b/public/init.te @@ -297,9 +297,9 @@ allow init self:global_capability2_class_set syslog; # init access to /proc. r_dir_file(init, proc_net_type) -# Overlayfs workdir write access check during mount to permit remount,rw userdebug_or_eng(` - allow init overlayfs_file:dir { relabelfrom write }; + # Overlayfs workdir write access check during mount to permit remount,rw + allow init overlayfs_file:dir { relabelfrom mounton write }; ') allow init {