summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordcashman <dcashman@google.com>2015-06-30 09:30:06 -0700
committerdcashman <dcashman@google.com>2015-06-30 09:30:06 -0700
commita49c8443b3be21f77b4fd05df0504f6e3d7df144 (patch)
treea23b05aa99f07a40a33de792065201ee7d4d1233
parentcdafd4be21eeee1038dfb2c3936bea03786b67ba (diff)
downloadfugu-a49c8443b3be21f77b4fd05df0504f6e3d7df144.tar.gz
Allow init to create /mnt/sdcard symlink.
Addresses the following denial: avc: denied { create } for pid=1 comm="init" name="sdcard" scontext=u:r:init:s0 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=0 Bug: 22084499 Change-Id: Icffef8330d07b00f36fda11374e39e0df7181ca3
-rw-r--r--sepolicy/init.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 9771587..1a24e0b 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -1,3 +1,4 @@
# Mount on and write to /proc/sys/fs/binfmt_misc.
allow init proc:dir mounton;
allow init binfmt_miscfs:file w_file_perms;
+allow init tmpfs:lnk_file create_file_perms;