blob: 241f191bfa710c0a14a96433681e8815aef39ce8 [file] [log] [blame]
Tom Marshall39a42442014-11-26 13:26:14 -08001domain_trans(init, rootfs, vold)
2
Pawit Pornkitprasanef907712013-11-14 10:46:26 +07003# Allow vold to manage ASEC
4allow vold sdcard_external:file create_file_perms;
Pawit Pornkitprasan9a19f572013-11-15 09:54:39 +07005
6# Allow vold to change context for mounted ext4 sdcard
Pawit Pornkitprasan9a19f572013-11-15 09:54:39 +07007allow vold labeledfs:filesystem { relabelfrom };
Ricardo Cerqueira49a30e72014-11-05 18:22:50 +00008allow vold sdcard_external:filesystem { relabelfrom };
Pawit Pornkitprasan54c91b82013-12-10 17:10:50 +07009
10# Allow vold to access fuse for fuse-based fs
11allow vold fuse_device:chr_file rw_file_perms;
12
13# NTFS-3g wants to drop permission
14allow vold self:capability { setgid setuid };