From 6ddd83551c7ae6d0a4c8d1f1ef06199c5c424d95 Mon Sep 17 00:00:00 2001 From: d34d Date: Wed, 14 Sep 2016 15:15:06 -0700 Subject: [PATCH] themes: allow system_server to relabel them dir On a fresh install the theme service broker creates the initial theme directory which needs to be relabeled to a themeservice_app_data_File in order for the brokered theme service to write to this directory Change-Id: Ifd689a0c619c0e954192749b83a0cacaa945468f TICKET: NIGHTLIES-3349 --- sepolicy/system_server.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te index 61b85655..f88353aa 100644 --- a/sepolicy/system_server.te +++ b/sepolicy/system_server.te @@ -11,3 +11,7 @@ allow system_server storage_stub_file:dir { getattr }; allow system_server media_rw_data_file:dir r_dir_perms; get_prop(system_server, adbsecure_prop) + +# Allow system_server to relabel newly created theme directory for +# use by the proxied theme service +allow system_server themeservice_app_data_file:dir relabelto;