commit c63edee2f9b8134fe0dfbb4c094fb56d199ebcd3
author Yongqin Liu <yongqin.liu@linaro.org> Wed Jun 15 13:45:23 2016 +0800
committer Dmitry Shmidt <dimitrysh@google.com> Mon Jun 20 10:49:02 2016 -0700
tree f62d12d2f43e1860fbc445eeeb36a12e916972f0
parent 6050940f093ffc8e5c4a62883f3bddfa10536a3d

init.te: allow create sdcard link in /mnt

to avoid avc like following:
avc:  denied  { create } for  pid=1 comm="init" name="sdcard" scontext=u:r:init:s0 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=1

Change-Id: I8d8adbf2819f5b6e09a1dae95816c731e495cbac
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>

sepolicy/init.te

diff --git a/sepolicy/init.te b/sepolicy/init.te
index f14792a..16d3a3e 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -2,3 +2,5 @@
 allow init configfs:dir create_dir_perms;
 allow init configfs:file write;
 allow init configfs:lnk_file { create unlink };
+# for symlink /sdcard /mnt/sdcard
+allow init tmpfs:lnk_file create;