blob: 5ba86017b1d3ac15a918bc26a78a341a4760ddaa [file] [log] [blame]
#
# Rules for all platform app domains.
# These rules are inherited by any domain that includes platform_app_domain().
# Presently this consists of the four app domains corresponding to apps
# signed by one of the four build keys: platform_app, shared_app, media_app,
# release_app. These app domains have greater permissions to specific
# directories owned by groups that are restricted to apps with
# Android permissions that are signature|system.
# Access to /data/media.
allow platformappdomain media_rw_data_file:dir create_dir_perms;
allow platformappdomain media_rw_data_file:file create_file_perms;
# Write to /cache.
allow platformappdomain cache_file:dir create_dir_perms;
allow platformappdomain cache_file:file create_file_perms;