From 0cd00c915add848fd9bfd84f6ec45a2516bb3b68 Mon Sep 17 00:00:00 2001 From: C3C0 Date: Sat, 23 Feb 2019 23:53:54 +0100 Subject: [PATCH] supolicy: added platform_app to mlstrustedsubject This allows access of platform apps such as SystemUI to app data files on devices having SELinux with MLS constrains. Fixes bug #106 also discussed in #98 --- Core/template_override/common/post-fs-data.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/Core/template_override/common/post-fs-data.sh b/Core/template_override/common/post-fs-data.sh index a22e98c9..4fec52e5 100644 --- a/Core/template_override/common/post-fs-data.sh +++ b/Core/template_override/common/post-fs-data.sh @@ -18,6 +18,7 @@ supolicy --live "allow coredomain coredomain process {execmem}" # read configs set in our app supolicy --live "allow coredomain app_data_file * *" +supolicy --live "attradd platform_app mlstrustedsubject" # read module apk file in zygote supolicy --live "allow zygote apk_data_file * *"