sepolicy: Allow uncrypt additional access

Uncrypt may need access to additional selinux contexts for devices with created storage solutions. Change-Id: Ie90f130ff6bafdd195379f7d57504b2fce4ef830
8 years ago · ca2061460c
parent 603ce3ba3e
commit ca2061460c
1 changed files with 5 additions and 0 deletions
--- a/sepolicy/uncrypt.te
+++ b/sepolicy/uncrypt.te
@ -2,3 +2,8 @@ r_dir_file(uncrypt, media_rw_data_file)
 allow uncrypt recovery_cache_file:dir create_dir_perms;
 allow uncrypt recovery_cache_file:file create_file_perms;
 allow uncrypt recovery_cache_file:fifo_file rw_file_perms;
+
+allow uncrypt storage_file:dir r_dir_perms;
+allow uncrypt storage_stub_file:dir r_dir_perms;
+allow uncrypt fuse:dir r_dir_perms;
+allow uncrypt fuse:file r_file_perms;