sepolicy: allow vold to create files on external sdcard

This is required for ASEC support. Vold can already create and access directories, but do not yet have the permission for files. Change-Id: I5082bbff692e5dc53c7000e4b3a293e42d33f901
11 years ago · ef907713b7
parent 1b6aa84f9d
commit ef907713b7
2 changed files with 3 additions and 0 deletions
--- a/sepolicy/sepolicy.mk
+++ b/sepolicy/sepolicy.mk
@ -13,4 +13,5 @@ BOARD_SEPOLICY_UNION += \
    genfs_contexts \
    installd.te \
    seapp_contexts \
+    vold.te \
    mac_permissions.xml
--- a/sepolicy/vold.te
+++ b/sepolicy/vold.te
@ -0,0 +1,2 @@
+# Allow vold to manage ASEC
+allow vold sdcard_external:file create_file_perms;