From a883c3863739d5ada3509517af148a9499401600 Mon Sep 17 00:00:00 2001 From: Stephen Smalley <sds@tycho.nsa.gov> Date: Wed, 4 Apr 2012 16:00:11 -0400 Subject: [PATCH] Allow apps to write to anr_data_file for /data/anr/traces.txt. --- app.te | 4 ++++ file.te | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/app.te b/app.te index 99c8e6a52..7e06c102f 100644 --- a/app.te +++ b/app.te @@ -99,6 +99,10 @@ allow appdomain system_data_file:dir r_dir_perms; # Read/write wallpaper file (opened by system). allow appdomain wallpaper_file:file { read write }; +# Write to /data/anr/traces.txt. +allow appdomain anr_data_file:dir search; +allow appdomain anr_data_file:file { open append }; + # Use the Binder. binder_use(appdomain) # Perform binder IPC to binder services. diff --git a/file.te b/file.te index 312ace8d3..b6e3a5d08 100644 --- a/file.te +++ b/file.te @@ -26,7 +26,7 @@ type system_data_file, file_type, data_file_type; # /data/drm - DRM plugin data type drm_data_file, file_type, data_file_type; # /data/anr - ANR traces -type anr_data_file, file_type, data_file_type; +type anr_data_file, file_type, data_file_type, mlstrustedobject; # /data/tombstones - core dumps type tombstone_data_file, file_type, data_file_type; # /data/app - user-installed apps -- GitLab