Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit cd7dd87f authored by Aaron Kling's avatar Aaron Kling Committed by Jan Altensen
Browse files

Revert "common: Drop custom filesystem rules" 

This reverts commit 84ff049f.

Reason for revert: Needed for custom filesystem support

Change-Id: Ie7d24391f68bb854e53b78aa92d01c2c546a3089
parent 6a75edac

common/private/file.te

+1 −0
Original line number Diff line number Diff line 
type sdcard_posix, sdcard_type, sdcard_posix_contextmount_type, fs_type, mlstrustedobject;

type sysfs_io_sched_tuneable, fs_type, sysfs_type;

type adbroot_data_file, file_type, data_file_type, core_data_file_type;

common/private/file_contexts

+6 −0
Original line number Diff line number Diff line 
# Filesystem tools

/system/bin/fsck\.ntfs                  u:object_r:fsck_exec:s0

/system/bin/mkfs\.exfat                 u:object_r:mkfs_exec:s0

/system/bin/mkfs\.f2fs                  u:object_r:mkfs_exec:s0

/system/bin/mkfs\.ntfs                  u:object_r:mkfs_exec:s0



# I/O Scheduler

/sys/devices(/platform)?/msm_sdcc\.[0-9]/mmc_host/mmc[0-9]/mmc[0-9]:[a-f0-9]+/block/mmcblk[0-9]/queue/(scheduler|iosched/slice_idle) u:object_r:sysfs_io_sched_tuneable:s0

/sys/devices(/platform)?/soc(\.[0-9])?/[a-f0-9]+\.sdhci/mmc_host/mmc[0-9]/mmc[0-9]:[a-f0-9]+/block/mmcblk[0-9]/queue/(scheduler|iosched/slice_idle) u:object_r:sysfs_io_sched_tuneable:s0

common/private/fsck_untrusted.te

0 → 100644
+2 −0
Original line number Diff line number Diff line 
# External storage

allow fsck_untrusted self:capability sys_admin;

common/private/genfs_contexts

+4 −0
Original line number Diff line number Diff line 
ifelse(board_excludes_fuseblk_sepolicy, `true', ,

genfscon fuseblk / u:object_r:vfat:s0

)



genfscon sysfs /devices/virtual/timed_output/vibrator u:object_r:sysfs_vibrator:s0

common/private/mkfs.te

0 → 100644
+9 −0
Original line number Diff line number Diff line 
type mkfs, coredomain, domain;

type mkfs_exec, system_file_type, exec_type, file_type;



init_daemon_domain(mkfs)



# Allow formatting userdata or cache partitions

allow mkfs block_device:dir search;

allow mkfs userdata_block_device:blk_file rw_file_perms;

allow mkfs cache_block_device:blk_file rw_file_perms;