Skip to content

Commit

Permalink
Expand bluetooth access to media_rw_data_file for now.
Browse files Browse the repository at this point in the history
With sdcardfs, we no longer have a separate sdcardd acting as
an intermediate between the outside world and /data/media.
Unless we modify sdcardfs to change contexts, we need these.

Remove this patch if sdcardfs is updated to change the
secontext of fs accesses.

Bug: 28040634

Change-Id: I492c87e9f232c57f43abd09b7864b52847bc3555
  • Loading branch information
drosen-google committed Apr 6, 2016
1 parent 75b25dd commit 4a0c803
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion bluetooth.te
Expand Up @@ -57,7 +57,8 @@ allow bluetooth shell_data_file:file read;
# Access to /data/media.
# This should be removed if sdcardfs is modified to alter the secontext for its
# accesses to the underlying FS.
allow bluetooth media_rw_data_file:dir search;
allow bluetooth media_rw_data_file:dir create_dir_perms;
allow bluetooth media_rw_data_file:file create_file_perms;

###
### Neverallow rules
Expand Down

0 comments on commit 4a0c803

Please sign in to comment.