Skip to content
Snippets Groups Projects
Commit a28ad688 authored by Andreas Gampe's avatar Andreas Gampe Committed by android-build-merger
Browse files

Selinux: Give runas permission to read system_data_file links am: 4481b885 am: 16efc04d

am: e9354cda

Change-Id: I330100bace90ebf5c4859c6577bf43ede1185b59
parents 59005d37 e9354cda
No related branches found
No related tags found
No related merge requests found
...@@ -14,6 +14,9 @@ allow runas shell_data_file:file { read write }; ...@@ -14,6 +14,9 @@ allow runas shell_data_file:file { read write };
allow runas system_data_file:file r_file_perms; allow runas system_data_file:file r_file_perms;
allow runas system_data_file:lnk_file getattr; allow runas system_data_file:lnk_file getattr;
# The app's data dir may be accessed through a symlink.
allow runas system_data_file:lnk_file read;
# run-as checks and changes to the app data dir. # run-as checks and changes to the app data dir.
dontaudit runas self:capability dac_override; dontaudit runas self:capability dac_override;
allow runas app_data_file:dir { getattr search }; allow runas app_data_file:dir { getattr search };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment