android_system_sepolicy/sdcardd.te

type sdcardd, domain;
permissive sdcardd;
type sdcardd_exec, exec_type, file_type;

init_daemon_domain(sdcardd)

allow sdcardd cgroup:dir create_dir_perms;
allow sdcardd fuse_device:chr_file rw_file_perms;
allow sdcardd rootfs:dir mounton;
allow sdcardd sdcard_type:filesystem mount;
allow sdcardd self:capability { setuid setgid dac_override sys_admin sys_resource };
allow sdcardd system_data_file:dir  create_dir_perms;
allow sdcardd system_data_file:file create_file_perms;
sdcard policy and fuse device label. 2012-05-31 06:44:51 -07:00			`type sdcardd, domain;`
Move domains into per-domain permissive mode. Bug: 4070557 Change-Id: I027f76cff6df90e9909711cb81fbd17db95233c1 2013-05-14 21:02:55 -07:00			`permissive sdcardd;`
sdcard policy and fuse device label. 2012-05-31 06:44:51 -07:00			`type sdcardd_exec, exec_type, file_type;`

			`init_daemon_domain(sdcardd)`

			`allow sdcardd cgroup:dir create_dir_perms;`
			`allow sdcardd fuse_device:chr_file rw_file_perms;`
			`allow sdcardd rootfs:dir mounton;`
Split internal and external sdcards Two new types are introduced: sdcard_internal sdcard_external The existing type of sdcard, is dropped and a new attribute sdcard_type is introduced. The boolean app_sdcard_rw has also been changed to allow for controlling untrusted_app domain to use the internal and external sdcards. Change-Id: Ic7252a8e1703a43cb496413809d01cc6cacba8f5 2013-03-06 16:26:36 -08:00			`allow sdcardd sdcard_type:filesystem mount;`
Add the sys_resource capability to sdcardd. Change-Id: I0b2ecdbddbed3d5ea1617c9ae9af7f8b1c9ace93 2013-03-27 21:14:31 -07:00			`allow sdcardd self:capability { setuid setgid dac_override sys_admin sys_resource };`
sdcard policy and fuse device label. 2012-05-31 06:44:51 -07:00			`allow sdcardd system_data_file:dir create_dir_perms;`
			`allow sdcardd system_data_file:file create_file_perms;`