tree d27880c0328e6a0b3f13b25f9ea5539a2acca112
parent 099d63290bc03dd5b98041bc93f105f1342b3596
author dcashman <dcashman@google.com> 1436826661 -0700
committer dcashman <dcashman@google.com> 1436826952 -0700

Allow domains to read tmpfs symlinks.

Domains have the ability to read normal tmpfs files but not symlinks.
Grant this ability.  In particular, allow domains to read /mnt/sdcard.

Addresses the following denial:
type=1400 audit(0.0:19):avc: denied { read } for comm=4173796E635461736B202333 name="sdcard" dev="tmpfs" ino=7475 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:tmpfs:s0 tclass=lnk_file permissive=0

(cherry-pick of commit: 2b0b8299b2f144165290b18855a9ca256492564c)

Bug: 20755029
Change-Id: Iaa5dc278b34faf33473d3e49f92d8766ae5563c0