Mark asec_apk_file as mlstrustedobject.
Resolves denials such as: avc: denied { write } for pid=1546 comm="Binder_1" name="/" dev="dm-0" ino=2 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:asec_apk_file:s0 tclass=dir This is required to install a forward-locked app. Change-Id: I2b37a56d087bff7baf82c738896d9563f0ab4fc4 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
parent
8a0c25efb0
commit
476c207840
2
file.te
2
file.te
@ -111,7 +111,7 @@ type efs_file, file_type;
|
|||||||
# Type for wallpaper file.
|
# Type for wallpaper file.
|
||||||
type wallpaper_file, file_type, mlstrustedobject;
|
type wallpaper_file, file_type, mlstrustedobject;
|
||||||
# /mnt/asec
|
# /mnt/asec
|
||||||
type asec_apk_file, file_type, data_file_type;
|
type asec_apk_file, file_type, data_file_type, mlstrustedobject;
|
||||||
# Elements of asec files (/mnt/asec) that are world readable
|
# Elements of asec files (/mnt/asec) that are world readable
|
||||||
type asec_public_file, file_type, data_file_type;
|
type asec_public_file, file_type, data_file_type;
|
||||||
# /data/app-asec
|
# /data/app-asec
|
||||||
|
Loading…
Reference in New Issue
Block a user