allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: 320a0f54

am: 98262719 Change-Id: I2fa65a90b018a823288a4ed0572938fb9282999a

allow policy to create a file by vfat (fs_type) for a case using sdcardfs am: 320a0f54
am: 98262719 Change-Id: I2fa65a90b018a823288a4ed0572938fb9282999a
a031c3f6 · Eric Bae · android-build-merger · 56b0d2a2 · 98262719 · a031c3f6
Commit a031c3f6 authored 8 years ago by Eric Bae Committed by android-build-merger 8 years ago
--- a/untrusted_app.te
+++ b/untrusted_app.te
@@ -174,6 +174,7 @@ neverallow untrusted_app {
  fs_type
  -fuse                     # sdcard
  -sdcardfs                 # sdcard
+  -vfat
  file_type
  -app_data_file            # The apps sandbox itself
  -media_rw_data_file       # Internal storage. Known that apps can