PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

am 24fb24f7: am ae49e7a3: Merge "Confine tee, but leave it permissive for now."

Browse Source 
* commit '24fb24f7ea1bf74bc1234394b81955e0aab6943f':
  Confine tee, but leave it permissive for now.
This commit is contained in:
Nick Kralevich 2013-11-14 11:37:53 -08:00 committed by Android Git Automerger
commit e0068ecce3
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
tee.te
View File

@ -2,9 +2,14 @@
# trusted execution environment (tee) daemon
#
type tee, domain;
permissive tee;
type tee_exec, exec_type, file_type;
type tee_device, dev_type;
type tee_data_file, file_type, data_file_type;
unconfined_domain(tee)
init_daemon_domain(tee)
allow tee self:capability { dac_override };
allow tee tee_device:chr_file rw_file_perms;
allow tee tee_data_file:dir rw_dir_perms;
allow tee tee_data_file:file create_file_perms;
allow tee self:netlink_socket { create bind read };