diff --git a/private/untrusted_app_all.te b/private/untrusted_app_all.te index 306dba9a566b51044c14c08d31f5581f288c2a43..e1bba0d423bccf0fa2e484d0920b0763a17ab4a8 100644 --- a/private/untrusted_app_all.te +++ b/private/untrusted_app_all.te @@ -41,6 +41,15 @@ allow untrusted_app_all asec_public_file:file { execute execmod }; allow untrusted_app_all shell_data_file:file r_file_perms; allow untrusted_app_all shell_data_file:dir r_dir_perms; +# Allow traceur to pass file descriptors through a content provider to untrusted apps +# for the purpose of sharing files through e.g. gmail +allow untrusted_app_all trace_data_file:file { getattr read }; + +# untrusted apps should not be able to open trace data files, they should depend +# upon traceur to pass a file descriptor +neverallow untrusted_app_all trace_data_file:dir *; +neverallow untrusted_app_all trace_data_file:file { no_w_file_perms open }; + # Allow to read staged apks. allow untrusted_app_all { apk_tmp_file apk_private_tmp_file }:file {read getattr};