Skip to content
Snippets Groups Projects
Commit f71f0c94 authored by Andreas Gampe's avatar Andreas Gampe Committed by android-build-merger
Browse files

Selinux: Give runas permission to read system_data_file links am: 4481b885...

Selinux: Give runas permission to read system_data_file links am: 4481b885 am: 16efc04d am: e9354cda
am: a28ad688

Change-Id: Ib55ee766b488ce1b73f7fc6b04111ace0c5000ba
parents 01c57421 a28ad688
No related branches found
No related tags found
No related merge requests found
...@@ -14,6 +14,9 @@ allow runas shell_data_file:file { read write }; ...@@ -14,6 +14,9 @@ allow runas shell_data_file:file { read write };
allow runas system_data_file:file r_file_perms; allow runas system_data_file:file r_file_perms;
allow runas system_data_file:lnk_file getattr; allow runas system_data_file:lnk_file getattr;
# The app's data dir may be accessed through a symlink.
allow runas system_data_file:lnk_file read;
# run-as checks and changes to the app data dir. # run-as checks and changes to the app data dir.
dontaudit runas self:capability dac_override; dontaudit runas self:capability dac_override;
allow runas app_data_file:dir { getattr search }; allow runas app_data_file:dir { getattr search };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment