diff --git a/plat_private/file_contexts b/plat_private/file_contexts index 6fbd9ef..cf9159b 100644 --- a/plat_private/file_contexts +++ b/plat_private/file_contexts @@ -34,7 +34,7 @@ # storagemanager daemon # it is used to mount all storages in meta/factory mode -/system/bin/storagemanagerd u:object_r:storagemanagerd_exec:s0 +/system/bin/storagemanagerd u:object_r:vold_exec:s0 #MTK Bootanim /system/bin/mtkbootanimation u:object_r:mtkbootanimation_exec:s0 diff --git a/plat_private/storagemanagerd.te b/plat_private/storagemanagerd.te index 9c43b79..a7dee58 100644 --- a/plat_private/storagemanagerd.te +++ b/plat_private/storagemanagerd.te @@ -4,28 +4,9 @@ # ============================================== # Type Declaration # ============================================== -type storagemanagerd, domain; -type storagemanagerd_exec, exec_type, file_type; -typeattribute storagemanagerd coredomain; + +# Act as 'vold' context to mount storages # ============================================== # MTK Policy Rule # ============================================== - -init_daemon_domain(storagemanagerd) - -#unix_socket_connect(storagemanagerd, vold, vold) - -# storagemanagerd sends information back to dumpstate when "adb bugreport" is used -allow storagemanagerd dumpstate:fd use; -allow storagemanagerd dumpstate:unix_stream_socket { read write getattr }; - -# storagemanagerd information is written to shell owned bugreport files -allow storagemanagerd shell_data_file:file { write getattr }; - -# Why? -allow storagemanagerd dumpstate:unix_dgram_socket { read write }; - -# storagemanagerd can be invoked with logwrapper, so let it write to pty -allow storagemanagerd devpts:chr_file rw_file_perms; -