diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil index 6b37df7fac5eaba70935832eb4e1f44178fe3d17..550c861ddde46cd91c8fd2b6c429372e8ef4b66f 100644 --- a/private/compat/26.0/26.0.ignore.cil +++ b/private/compat/26.0/26.0.ignore.cil @@ -14,6 +14,7 @@ mediaprovider_tmpfs netd_stable_secret_prop package_native_service + storaged_data_file sysfs_fs_ext4_features system_net_netd_hwservice thermal_service diff --git a/private/file.te b/private/file.te index da5f9adde64d45cebadb8b6539d47d7599d8a61b..7bd83f2c5e13c2aed4782fcb3a109d8ef594480a 100644 --- a/private/file.te +++ b/private/file.te @@ -5,3 +5,6 @@ typealias app_data_file alias download_file; # /proc/config.gz type config_gz, fs_type; + +# /data/misc/storaged +type storaged_data_file, file_type, data_file_type, core_data_file_type; diff --git a/private/file_contexts b/private/file_contexts index 17378eeffc04cf9ae038a8b2fbe8c792bc6cb7a8..32505377664b0352734b243af22f8cdff6989ae3 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -376,6 +376,7 @@ /data/misc/recovery(/.*)? u:object_r:recovery_data_file:s0 /data/misc/shared_relro(/.*)? u:object_r:shared_relro_file:s0 /data/misc/sms(/.*)? u:object_r:radio_data_file:s0 +/data/misc/storaged(/.*)? u:object_r:storaged_data_file:s0 /data/misc/systemkeys(/.*)? u:object_r:systemkeys_data_file:s0 /data/misc/textclassifier(/.*)? u:object_r:textclassifier_data_file:s0 /data/misc/user(/.*)? u:object_r:misc_user_data_file:s0 diff --git a/private/storaged.te b/private/storaged.te index 20377e046d382daac107fa792ba5329231c09d20..8da1f26d8b285d1d70841c8542bfd46163da39ac 100644 --- a/private/storaged.te +++ b/private/storaged.te @@ -15,6 +15,10 @@ allow storaged proc_uid_io_stats:file r_file_perms; # Read /data/system/packages.list allow storaged system_data_file:file r_file_perms; +# Store storaged proto file +allow storaged storaged_data_file:dir rw_dir_perms; +allow storaged storaged_data_file:file create_file_perms; + userdebug_or_eng(` # Read access to debugfs allow storaged debugfs_mmc:dir search;