Tom Marshall | 39a4244 | 2014-11-26 13:26:14 -0800 | [diff] [blame^] | 1 | domain_trans(init, rootfs, vold) |
| 2 | |
Pawit Pornkitprasan | ef90771 | 2013-11-14 10:46:26 +0700 | [diff] [blame] | 3 | # Allow vold to manage ASEC |
| 4 | allow vold sdcard_external:file create_file_perms; |
Pawit Pornkitprasan | 9a19f57 | 2013-11-15 09:54:39 +0700 | [diff] [blame] | 5 | |
| 6 | # Allow vold to change context for mounted ext4 sdcard |
Pawit Pornkitprasan | 9a19f57 | 2013-11-15 09:54:39 +0700 | [diff] [blame] | 7 | allow vold labeledfs:filesystem { relabelfrom }; |
Ricardo Cerqueira | 49a30e7 | 2014-11-05 18:22:50 +0000 | [diff] [blame] | 8 | allow vold sdcard_external:filesystem { relabelfrom }; |
Pawit Pornkitprasan | 54c91b8 | 2013-12-10 17:10:50 +0700 | [diff] [blame] | 9 | |
| 10 | # Allow vold to access fuse for fuse-based fs |
| 11 | allow vold fuse_device:chr_file rw_file_perms; |
| 12 | |
| 13 | # NTFS-3g wants to drop permission |
| 14 | allow vold self:capability { setgid setuid }; |