diff options
author | RGIB <gibellini.roberto@gmail.com> | 2016-04-11 22:22:27 +0200 |
---|---|---|
committer | Roberto Gibellini <gibellini.roberto@gmail.com> | 2016-04-12 05:27:02 -0700 |
commit | 2ad4014ecfc85e42c8a5a1dabc36ca0203afe576 (patch) | |
tree | b020999ae7a1f35b518fddf2d064b42e8bc858a8 /selinux/cpboot-daemon.te | |
parent | 9689e23e1c710d2d4d2685a09655832637d3843c (diff) | |
download | device_samsung_kona-common-2ad4014ecfc85e42c8a5a1dabc36ca0203afe576.zip device_samsung_kona-common-2ad4014ecfc85e42c8a5a1dabc36ca0203afe576.tar.gz device_samsung_kona-common-2ad4014ecfc85e42c8a5a1dabc36ca0203afe576.tar.bz2 |
kona : update selinux
Change-Id: I6b4f818e32654119ec7ba7b33f2feb48d29e40de
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r-- | selinux/cpboot-daemon.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te index c4e592f..eab7ee6 100644 --- a/selinux/cpboot-daemon.te +++ b/selinux/cpboot-daemon.te @@ -5,6 +5,7 @@ domain_trans(init, rootfs, cpboot-daemon) dontaudit cpboot-daemon usbfs:dir search; dontaudit cpboot-daemon usbfs:filesystem mount; +dontaudit cpboot-daemon self:capability mknod; allow cpboot-daemon cgroup:dir { create add_name }; allow cpboot-daemon efs_file:file { read write open }; @@ -16,3 +17,5 @@ allow cpboot-daemon self:capability { setuid dac_override }; allow cpboot-daemon sysfs:file write; allow cpboot-daemon userdata_block_device:blk_file { read open }; allow cpboot-daemon efs_file:dir search; +allow cpboot-daemon efs_file:file { read write }; +allow cpboot-daemon device:dir { write };
\ No newline at end of file |