diff options
Diffstat (limited to 'common/private/updater_app.te')
| -rw-r--r-- | common/private/updater_app.te | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/common/private/updater_app.te b/common/private/updater_app.te new file mode 100644 index 0000000..a709b45 --- /dev/null +++ b/common/private/updater_app.te @@ -0,0 +1,18 @@ +# Read updates from storage data +r_dir_file(updater_app, mnt_user_file) +r_dir_file(updater_app, storage_file) + +# Allow to install OTA's from local storage +allow updater_app backuptool:process noatsecure; +allow updater_app media_rw_data_file:file { open read write getattr }; + +allow updater_app app_data_file:dir create_dir_perms; +allow updater_app app_data_file:{ file lnk_file } create_file_perms; + +allow updater_app cache_file:dir r_dir_perms; + +allow updater_app cache_recovery_file:dir rw_dir_perms; +allow updater_app cache_recovery_file:file create_file_perms; + +allow updater_app ota_package_file:dir create_dir_perms; +allow updater_app ota_package_file:file create_file_perms; |