summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYongqin Liu <yongqin.liu@linaro.org>2016-06-15 13:45:23 +0800
committerDmitry Shmidt <dimitrysh@google.com>2016-06-20 10:49:02 -0700
commitc63edee2f9b8134fe0dfbb4c094fb56d199ebcd3 (patch)
treef62d12d2f43e1860fbc445eeeb36a12e916972f0
parent6050940f093ffc8e5c4a62883f3bddfa10536a3d (diff)
downloadhikey-c63edee2f9b8134fe0dfbb4c094fb56d199ebcd3.tar.gz
init.te: allow create sdcard link in /mnt
to avoid avc like following: avc: denied { create } for pid=1 comm="init" name="sdcard" scontext=u:r:init:s0 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=1 Change-Id: I8d8adbf2819f5b6e09a1dae95816c731e495cbac Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
-rw-r--r--sepolicy/init.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/sepolicy/init.te b/sepolicy/init.te
index f14792ae..16d3a3e1 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -2,3 +2,5 @@
allow init configfs:dir create_dir_perms;
allow init configfs:file write;
allow init configfs:lnk_file { create unlink };
+# for symlink /sdcard /mnt/sdcard
+allow init tmpfs:lnk_file create;