Lines Matching refs:relabelfrom
198 relabelfrom
225 relabelfrom
270 relabelfrom
317 relabelfrom
971 relabelfrom
3260 mlsconstrain { socket tcp_socket udp_socket rawip_socket netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket appletalk_socket netlink_route_socket netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket netlink_ip6fw_socket netlink_dnrt_socket netlink_kobject_uevent_socket tun_socket } { create relabelfrom relabelto }
3280 mlsconstrain { dir { { chr_file blk_file } { file lnk_file sock_file fifo_file } } } { create relabelfrom relabelto }
4245 { create write setattr relabelfrom relabelto append unlink link rename };
4249 { create write setattr relabelfrom relabelto append unlink link rename };
4253 { create write setattr relabelfrom relabelto append unlink link rename };
4262 { create write setattr relabelfrom relabelto append unlink link rename };
4267 { create write setattr relabelfrom relabelto append unlink link rename };
4269 { create write setattr relabelfrom relabelto append unlink link rename };
4271 { create write setattr relabelfrom relabelto append unlink link rename };
4274 { create write setattr relabelfrom relabelto append unlink link rename };
4277 { create write setattr relabelfrom relabelto append unlink link rename };
4280 { create write setattr relabelfrom relabelto append unlink link rename };
4283 { create write setattr relabelfrom relabelto append unlink link rename };
4286 { create setattr relabelfrom relabelto append unlink link rename };
4289 { create write setattr relabelfrom relabelto append unlink link rename };
4292 { create write setattr relabelfrom relabelto append unlink link rename };
4295 { create write setattr relabelfrom relabelto append unlink link rename };
4298 { create write setattr relabelfrom relabelto append unlink link rename };
4301 { create write setattr relabelfrom relabelto append unlink link rename };
4654 allow debuggerd system_data_file:dir relabelfrom;
5067 # Note on relabelfrom: We allow any app relabelfrom, but without the relabelto
5071 allow domain unlabeled:{ file lnk_file sock_file fifo_file } { { create setattr { { getattr open read ioctl lock } { open append write } } { getattr link unlink rename } } relabelfrom };
5072 allow domain unlabeled:dir { { create reparent rmdir setattr { { open getattr read search ioctl } { open search write add_name remove_name } } { getattr link unlink rename } } relabelfrom };
5138 neverallow { domain -kernel -init -recovery -vold -zygote } { fs_type -sdcard_type }:filesystem { mount remount relabelfrom relabelto };
5404 allow dumpstate system_data_file:dir { { create reparent rmdir setattr { { open getattr read search ioctl } { open search write add_name remove_name } } { getattr link unlink rename } } relabelfrom };
6130 allow installd data_file_type:dir { relabelfrom relabelto };
6559 allow media_app platform_app_data_file:dir relabelfrom;
8828 allow system_server { apk_tmp_file apk_private_tmp_file }:file { relabelfrom relabelto };
8829 allow system_server { apk_data_file apk_private_data_file }:file { relabelfrom relabelto };
8832 allow system_server system_data_file:file relabelfrom;
8837 allow system_server system_data_file:dir relabelfrom;
8866 allow system_server cache_file:dir { relabelfrom { create reparent rmdir setattr { { open getattr read search ioctl } { open search write add_name remove_name } } { getattr link unlink rename } } };
8867 allow system_server cache_file:file { relabelfrom { create setattr { { getattr open read ioctl lock } { open append write } } { getattr link unlink rename } } };
8894 allow system_server backup_data_file:dir { relabelto relabelfrom };
8896 allow system_server cache_backup_file:file { relabelto relabelfrom };
8898 allow system_server cache_backup_file:dir { relabelto relabelfrom { create reparent rmdir setattr { { open getattr read search ioctl } { open search write add_name remove_name } } { getattr link unlink rename } } };
9090 allow ueventd sysfs_type:file { relabelfrom relabelto };
9503 allow vold asec_apk_file:dir { { { open getattr read search ioctl } { open search write add_name remove_name } } setattr relabelfrom };
9505 allow vold asec_apk_file:file { { getattr open read ioctl lock } setattr relabelfrom };
