| commit | 4d19f98c728373860c5628d46fe5f4d664c601d2 | [log] [tgz] |
|---|---|---|
| author | Daichi Hirono <hirono@google.com> | Tue Mar 22 17:14:30 2016 +0900 |
| committer | Nick Kralevich <nnk@google.com> | Mon Mar 28 00:06:45 2016 +0000 |
| tree | e6786e48e023a997cfc0937de8115a6f020b0cef | |
| parent | 0144eedba57cc078112f95ca66d827f98ecf4a5b [diff] |
Add mlstrustedobject to appfuse object type.
To write bytes to appfuse file from priv_app, we need to specify
mlstrustedobject.
The CL fixes the following denial.
type=1400 audit(0.0:77): avc: denied { write } for name="10" dev="fuse" ino=10 scontext=u:r:priv_app:s0:c512,c768 tcontext=u:object_r:app_fuse_file:s0 tclass=file permissive=0
BUG=23093747
Change-Id: I9901033bb3349d5def0bd7128db45a1169856dc1