selinux: allow to write the firmware files from recovery mode

Change-Id: I061c9d67b171099a3c5cf21c5961e15a2bc114fc Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
CyanogenMod · Mar 25, 2016 · e292f77 · e292f77
1 parent 169608c
commit e292f77
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/selinux/recovery.te b/selinux/recovery.te
@@ -0,0 +1,7 @@
+recovery_only(`
+
+# firmware files
+allow recovery firmware_exynos:dir { create setattr relabelto relabelfrom };
+allow recovery firmware_exynos:file { create write open setattr relabelto relabelfrom };
+allow recovery firmware_mfc:file { create write open setattr relabelto relabelfrom };
+')