external/sepolicy: mediaserver open application data files

3296dea4 · Haiqing Jiang · Stephen Smalley · 569f589a · 3296dea4
Commit 3296dea4 authored 12 years ago by Haiqing Jiang Committed by Stephen Smalley 12 years ago
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -11,7 +11,7 @@ binder_call(mediaserver, binderservicedomain)
 binder_call(mediaserver, appdomain)
 binder_service(mediaserver)
 allow mediaserver app_data_file:dir search;
-allow mediaserver app_data_file:file { read getattr };
+allow mediaserver app_data_file:file r_file_perms;
 r_dir_file(mediaserver, sdcard)
 allow mediaserver sdcard:file write;
 allow mediaserver camera_device:chr_file rw_file_perms;