Commit 2d71788b authored Dec 18, 2016 by fire855

sepolicy: add support for exfat & ntfs

parent 9e740db2

sepolicy/file.te

+5 −1

Original line number	Diff line number	Diff line
		@@ -31,3 +31,7 @@ type agpsd_socket, file_type;
		type mnld_socket, file_type;

		type nfc_socket, file_type;

		# Filesystems
		type exfat, sdcard_type, fs_type, mlstrustedobject;
		type ntfs, sdcard_type, fs_type, mlstrustedobject;

sepolicy/file_contexts

+8 −0

Original line number	Diff line number	Diff line
		@@ -22,6 +22,14 @@
		/system/bin/kpoc_charger u:object_r:kpoc_charger_exec:s0
		/system/bin/etsd u:object_r:etsd_exec:s0

		# exfat & ntfs
		/system/bin/mkfs\.exfat u:object_r:mkfs_exec:s0
		/system/bin/mkfs\.ntfs u:object_r:mkfs_exec:s0
		/system/bin/mount\.ntfs u:object_r:mkfs_exec:s0
		/system/bin/mount\.exfat u:object_r:mkfs_exec:s0
		/system/bin/fsck\.ntfs u:object_r:fsck_exec:s0
		/system/bin/fsck\.exfat u:object_r:fsck_exec:s0

		# Meta mode
		/system/bin/meta_tst u:object_r:meta_tst_exec:s0
		/system/bin/factory u:object_r:factory_exec:s0

sepolicy/fsck_untrusted.te

0 → 100644

+2 −0

Original line number	Diff line number	Diff line
		# External storage
		allow fsck_untrusted self:capability sys_admin;
		No newline at end of file

sepolicy/genfs_contexts

+7 −4

Original line number	Diff line number	Diff line
		@@ -2,3 +2,6 @@ genfscon proc /driver/thermal u:object_r:proc_thermal:s0
		genfscon proc /driver/wmt u:object_r:proc_wmt:s0
		genfscon proc /mtkcooler u:object_r:proc_mtkcooler:s0
		genfscon proc /mtktz u:object_r:proc_mtktz:s0
		genfscon fuseblk / u:object_r:fuse:s0
		genfscon exfat / u:object_r:exfat:s0
		genfscon ntfs / u:object_r:ntfs:s0

sepolicy/mkfs.te

0 → 100644

+9 −0

Original line number	Diff line number	Diff line
		type mkfs, domain;
		type mkfs_exec, exec_type, file_type;

		init_daemon_domain(mkfs)

		# Allow formatting userdata or cache partitions
		allow mkfs block_device:dir search;
		allow mkfs userdata_block_device:blk_file rw_file_perms;
		allow mkfs cache_block_device:blk_file rw_file_perms;