android_device_samsung_msm8.../sepolicy/common/fsck_untrusted.te

allow fsck_untrusted block_device:dir getattr;

# /data/media
allow fsck_untrusted media_rw_data_file:dir getattr;

allowxperm fsck_untrusted vold_device:blk_file ioctl 0x1271;
allowxperm fsck_untrusted vold_device:blk_file ioctl BLKROGET;
msm8974-common: sepolicy: Allow untrusted fsck to getattr block_device dirs avc: denied { getattr } for path="/dev/block" dev="tmpfs" ino=6914 scontext=u:r:fsck_untrusted:s0 tcontext=u:object_r:block_device:s0 tclass=dir permissive=0 Change-Id: I03c1086a21edba4e193f81b473e6785aac890364 2020-09-04 22:44:22 +02:00			`allow fsck_untrusted block_device:dir getattr;`

msm8974-common: sepolicy: Import common sepolicy from klte-common * The bulk of the device family policy was common and applicable to all Samsung msm8974-devices. Move that common stuff here to ease maintenance. Change-Id: I86516adfb1b9c55a6959a7faf4ee424a4b3385c8 2018-02-03 23:04:39 +01:00			`# /data/media`
			`allow fsck_untrusted media_rw_data_file:dir getattr;`
msm8974-common: sepolicy: Allow ioctls necessary for physical sdcard operations * Note: 0x1271 is note defined in system/sepolicy/public/ioctl_defines avc: denied { ioctl } for path="/dev/block/vold/public:179,65" dev="tmpfs" ino=19222 ioctlcmd=125e scontext=u:r:vold:s0 tcontext=u:object_r:vold_device:s0 tclass=blk_file permissive=0 avc: denied { ioctl } for path="/dev/block/vold/public:179,65" dev="tmpfs" ino=20176 ioctlcmd=1271 scontext=u:r:vold:s0 tcontext=u:object_r:vold_device:s0 tclass=blk_file permissive=0 avc: denied { ioctl } for path="/dev/block/vold/public:179,65" dev="tmpfs" ino=27110 ioctlcmd=125e scontext=u:r:fsck_untrusted:s0 tcontext=u:object_r:vold_device:s0 tclass=blk_file permissive=0 avc: denied { ioctl } for path="/dev/block/vold/public:179,65" dev="tmpfs" ino=27110 ioctlcmd=1271 scontext=u:r:fsck_untrusted:s0 tcontext=u:object_r:vold_device:s0 tclass=blk_file permissive=0 Change-Id: I7bf2346b9517196160e4dde51baa550fb343bfdf 2020-09-04 22:51:35 +02:00
			`allowxperm fsck_untrusted vold_device:blk_file ioctl 0x1271;`
			`allowxperm fsck_untrusted vold_device:blk_file ioctl BLKROGET;`