From a1558be5e2a6f50ee41cee579d1bd5db808c8325 Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 24 Jun 2014 13:55:33 -0400
Subject: [PATCH] Allow kernel sdcard read access as well for MTP sync.

Change-Id: I004ae9aee23a28cb4975fcee51d24eb1a654f0b7
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 kernel.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kernel.te b/kernel.te
index ca01bbf62..422edc9e5 100644
--- a/kernel.te
+++ b/kernel.te
@@ -35,7 +35,7 @@ dontaudit kernel self:security setenforce;
 allow kernel self:security setcheckreqprot;
 
 # MTP sync
-allow kernel sdcard_internal:file write;
+allow kernel sdcard_internal:file { read write };
 
 ###
 ### neverallow rules
-- 
GitLab