Allow google_camera_app access to media_rw_data_file
With sdcardfs, we no longer have a separate sdcardd acting as
an intermediate between the outside world and /data/media.
Unless we modify sdcardfs to change contexts, we need these.
Added for: adbd, kernel, mediaserver, and shell
Remove this patch if sdcardfs is updated to change the
secontext of fs accesses.
Change-Id: I80255bfcf757c5873d8b62a1ad4640df3a937249
Test: Start Camera app with sdcardfs enabled.
diff --git a/sepolicy/google_camera_app.te b/sepolicy/google_camera_app.te
index 66364a0..2acb616 100644
--- a/sepolicy/google_camera_app.te
+++ b/sepolicy/google_camera_app.te
@@ -29,3 +29,9 @@
# Motivating case was /data/data/com.android.settings/cache/*.jpg for
# cropping or taking user photos.
allow google_camera_app system_app_data_file:file { read write getattr };
+
+# Access to /data/media.
+# This should be removed if sdcardfs is modified to alter the secontext for its
+# accesses to the underlying FS.
+allow google_camera_app media_rw_data_file:dir create_dir_perms;
+allow google_camera_app media_rw_data_file:file create_file_perms;
