You can mount with a security label it works. mount vfat <blockdev> /firmware ro gid=1000,umask=0006,fmask=0006,dmask=0006,shortname=lower context=u:object_r:firmware:s0
Bill On Fri, Dec 7, 2012 at 1:14 PM, Joshua Brindle <[email protected]> wrote: > I've started working through the policy on mako. > > One stumbling block I've hit is that there is a vfat filesystem mounted on > /firmware. Since vfat is labeled as sdcard by default that causes many > denials related to sdcard. > > I don't see a mount option for context but that would be 1 way to solve the > problem. Another way is to remove the genfscon for sdcard in the main policy > and only add it to phones with an actual vfat sdcard, which I don't think > are any current Nexus devices. > > Thoughts? > > -- > This message was distributed to subscribers of the seandroid-list mailing > list. > If you no longer wish to subscribe, send mail to [email protected] > with > the words "unsubscribe seandroid-list" without quotes as the message. -- Respectfully, William C Roberts -- This message was distributed to subscribers of the seandroid-list mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe seandroid-list" without quotes as the message.
