sepolicy: Allow CMUpdater/uncrypt access to recovery_cache_file
Change-Id: I514d128160ed4e04564077d7a2e2ad297af92e28
diff --git a/sepolicy/mac_permissions.xml b/sepolicy/mac_permissions.xml
index e91c6f4..184e356 100644
--- a/sepolicy/mac_permissions.xml
+++ b/sepolicy/mac_permissions.xml
@@ -14,4 +14,11 @@
<allow-all />
<seinfo value="release" />
</signer>
+
+ <!-- CMUpdater -->
+ <signer signature="@RELEASE" >
+ <package name="com.cyanogenmod.updater" >
+ <seinfo value="cmupdater" />
+ </package>
+ </signer>
</policy>
diff --git a/sepolicy/seapp_contexts b/sepolicy/seapp_contexts
index bfad418..06c96d4 100644
--- a/sepolicy/seapp_contexts
+++ b/sepolicy/seapp_contexts
@@ -1,2 +1,3 @@
user=_app seinfo=platform name=com.cyanogenmod.filemanager domain=untrusted_app type=app_data_file
user=theme_man domain=system_app type=system_data_file
+user=_app seinfo=cmupdater name=com.cyanogenmod.updater domain=system_app type=system_app_data_file
diff --git a/sepolicy/uncrypt.te b/sepolicy/uncrypt.te
index 8fddf8a..2e545a7 100644
--- a/sepolicy/uncrypt.te
+++ b/sepolicy/uncrypt.te
@@ -1 +1,3 @@
r_dir_file(uncrypt, media_rw_data_file)
+allow uncrypt recovery_cache_file:dir create_dir_perms;
+allow uncrypt recovery_cache_file:file create_file_perms;