exynos9610: sepolicy: Allow multiple services to search system data dirs

* /data/user_de/0 specifically.

Change-Id: I6c3dc06e66b02e13c627922b483966250fba3532

diff --git a/sepolicy/private/bootanim.te b/sepolicy/private/bootanim.te
new file mode 100644 (file)
index 0000000..51ffda8
--- /dev/null
+++ b/sepolicy/private/bootanim.te
@@ -0,0 +1 @@
+allow bootanim system_data_file:dir search;

diff --git a/sepolicy/vendor/gpsd.te b/sepolicy/vendor/gpsd.te
index b28039659ddb32d534ec6b7e478bb9176a8fd624..c92c0ee56bcf74775432cb8f2c13bd764a1eee99 100644 (file)
--- a/sepolicy/vendor/gpsd.te
+++ b/sepolicy/vendor/gpsd.te
@@ -1,5 +1,7 @@
 allow gpsd gnss_device:chr_file rw_file_perms;
 
+allow gpsd system_data_file:dir search;
+
 allow gpsd gps_vendor_data_file:dir create_dir_perms;
 allow gpsd gps_vendor_data_file:file create_file_perms;
 allow gpsd gps_vendor_data_file:fifo_file create_file_perms;

diff --git a/sepolicy/vendor/vendor_gnss_default.te b/sepolicy/vendor/vendor_gnss_default.te
new file mode 100644 (file)
index 0000000..040f97c
--- /dev/null
+++ b/sepolicy/vendor/vendor_gnss_default.te
@@ -0,0 +1 @@
+allow hal_gnss_default system_data_file:dir search;

diff --git a/sepolicy/vendor/vendor_ims_app.te b/sepolicy/vendor/vendor_ims_app.te
index ecc41658141e300f1be9e8e697cb5e9ae7aaecaf..b71694c0984ed6013533f92aaf4c4da12dbf4b0e 100644 (file)
--- a/sepolicy/vendor/vendor_ims_app.te
+++ b/sepolicy/vendor/vendor_ims_app.te
@@ -13,6 +13,8 @@ allow vendor_ims_app audioserver_service:service_manager find;
 allow vendor_ims_app radio_data_file:dir rw_dir_perms;
 allow vendor_ims_app radio_data_file:file create_file_perms;
 
+allow vendor_ims_app system_data_file:dir search;
+
 allow vendor_ims_app misc_vendor_data_file:dir create_dir_perms;
 allow vendor_ims_app misc_vendor_data_file:file create_file_perms;