Skip to content
Snippets Groups Projects
Commit eb6b74fa authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Allow kernel sdcard access for MTP sync.


Address denials such as:
avc: denied { write } for pid=2587 comm="kworker/u:4" path="/storage/emulated/0/Download/AllFileFormatesFromTommy/Test3GP.3gp" dev="fuse" ino=3086052592 scontext=u:r:kernel:s0 tcontext=u:object_r:sdcard_internal:s0 tclass=file permissive=0

Change-Id: I351e84b48f1b5a3361bc680b2ef379961ac2e8ea
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
Bug: 15835289
parent 9f2d3f93
No related branches found
No related tags found
No related merge requests found
...@@ -34,6 +34,9 @@ dontaudit kernel self:security setenforce; ...@@ -34,6 +34,9 @@ dontaudit kernel self:security setenforce;
# Set checkreqprot by init.rc prior to switching to init domain. # Set checkreqprot by init.rc prior to switching to init domain.
allow kernel self:security setcheckreqprot; allow kernel self:security setcheckreqprot;
# MTP sync
allow kernel sdcard_internal:file write;
### ###
### neverallow rules ### neverallow rules
### ###
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment