From 7bff13f9e8e667c5e8ad99037730a851da231836 Mon Sep 17 00:00:00 2001
From: Bruno Martins <bgcngm@gmail.com>
Date: Fri, 16 Nov 2018 11:12:37 +0000
Subject: [PATCH] sepolicy: Grant mediaextractor access to files over all types
of sdcard fs
* Account for all possible sdcard-related filesystem types and not only
sdcardfs:
public/file.te:108:type fuse, sdcard_type, fs_type, mlstrustedobject;
public/file.te:109:type sdcardfs, sdcard_type, fs_type, mlstrustedobject;
public/file.te:111:type vfat, sdcard_type, fs_type, mlstrustedobject;
public/file.te:112:type exfat, sdcard_type, fs_type, mlstrustedobject;
Change-Id: Ic508397bf4ca66a002ada33ac3f600c17b8a1a10
---
public/mediaextractor.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/public/mediaextractor.te b/public/mediaextractor.te
index 8f588689f..e86becf6f 100644
--- a/public/mediaextractor.te
+++ b/public/mediaextractor.te
@@ -23,7 +23,7 @@ allow mediaextractor proc_meminfo:file r_file_perms;
crash_dump_fallback(mediaextractor)
# allow mediaextractor read permissions for file sources
-allow mediaextractor sdcardfs:file { getattr read };
+allow mediaextractor sdcard_type:file { getattr read };
allow mediaextractor media_rw_data_file:file { getattr read };
allow mediaextractor { app_data_file privapp_data_file }:file { getattr read };
--
GitLab