commit 7585fc64003a2caf56643e80fbc9984903cf3d2d
author Haiqing Jiang <hqjiang1988@gmail.com> Fri Jul 27 11:23:10 2012 -0700
committer Stephen Smalley <sds@tycho.nsa.gov> Fri Jul 27 15:10:47 2012 -0400
tree 75553431e5b91219d8be4e4cc5d9eda6ed6f98a9
parent b9760aa0d59aafe5c36ee4522fb36d51a9c147df

Platform app domain sdcard accesses

app.te

diff --git a/app.te b/app.te
index df0f5df..85de816 100644
--- a/app.te
+++ b/app.te
@@ -22,9 +22,6 @@
 allow platform_app shell_data_file:dir search;
 allow platform_app shell_data_file:file { open getattr read };
 allow platform_app shell_data_file:lnk_file read;
-# Access the sdcard.
-allow platform_app sdcard:dir create_dir_perms;
-allow platform_app sdcard:file create_file_perms;
 # Populate /data/app/vmdl*.tmp file created by system server.
 allow platform_app apk_tmp_file:file rw_file_perms;
 
@@ -41,9 +38,6 @@
 # Write to /cache.
 allow media_app cache_file:dir rw_dir_perms;
 allow media_app cache_file:file create_file_perms;
-# Access sdcard.
-allow media_app sdcard:dir create_dir_perms;
-allow media_app sdcard:file create_file_perms;
 # Read/[write] to /proc/net/xt_qtaguid/ctrl and /dev/xt_qtaguid
 allow media_app qtaguid_proc:file rw_file_perms;
 allow media_app qtaguid_device:chr_file r_file_perms;
@@ -86,6 +80,9 @@
 # App sandbox file accesses.
 allow platformappdomain platform_app_data_file:dir create_dir_perms;
 allow platformappdomain platform_app_data_file:notdevfile_class_set create_file_perms;
+# App sdcard file accesses
+allow platformappdomain sdcard:dir create_dir_perms;
+allow platformappdomain sdcard:file create_file_perms;
 
 #
 # Untrusted apps.