From 99760b9673bdafedc9c59cd0139c46dcd31eef8b Mon Sep 17 00:00:00 2001 From: Wolfgang Wiedmeyer Date: Fri, 25 Mar 2016 20:51:06 +0100 Subject: selinux: allow to write the firmware files from recovery mode Change-Id: I061c9d67b171099a3c5cf21c5961e15a2bc114fc Signed-off-by: Wolfgang Wiedmeyer --- selinux/recovery.te | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 selinux/recovery.te (limited to 'selinux') diff --git a/selinux/recovery.te b/selinux/recovery.te new file mode 100644 index 0000000..531f480 --- /dev/null +++ b/selinux/recovery.te @@ -0,0 +1,7 @@ +recovery_only(` + +# firmware files +allow recovery firmware_exynos:dir { create setattr relabelto relabelfrom }; +allow recovery firmware_exynos:file { create write open setattr relabelto relabelfrom }; +allow recovery firmware_mfc:file { create write open setattr relabelto relabelfrom }; +') -- cgit v1.1