commit 301555e6f3445cda4ccec0240c37848a1d3b9d0e
author dcashman <dcashman@google.com> Mon Jul 13 15:31:01 2015 -0700
committer dcashman <dcashman@google.com> Mon Jul 13 15:35:52 2015 -0700
tree d27880c0328e6a0b3f13b25f9ea5539a2acca112
parent 099d63290bc03dd5b98041bc93f105f1342b3596

Allow domains to read tmpfs symlinks.

Domains have the ability to read normal tmpfs files but not symlinks.
Grant this ability.  In particular, allow domains to read /mnt/sdcard.

Addresses the following denial:
type=1400 audit(0.0:19):avc: denied { read } for comm=4173796E635461736B202333 name="sdcard" dev="tmpfs" ino=7475 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=0

(cherry-pick of commit: 2b0b8299b2f144165290b18855a9ca256492564c)

Bug: 20755029
Change-Id: Iaa5dc278b34faf33473d3e49f92d8766ae5563c0