aboutsummaryrefslogtreecommitdiffstats
path: root/selinux/cpboot-daemon.te
diff options
context:
space:
mode:
Diffstat (limited to 'selinux/cpboot-daemon.te')
-rw-r--r--selinux/cpboot-daemon.te6
1 files changed, 3 insertions, 3 deletions
diff --git a/selinux/cpboot-daemon.te b/selinux/cpboot-daemon.te
index eab7ee6..26b877c 100644
--- a/selinux/cpboot-daemon.te
+++ b/selinux/cpboot-daemon.te
@@ -6,6 +6,8 @@ domain_trans(init, rootfs, cpboot-daemon)
dontaudit cpboot-daemon usbfs:dir search;
dontaudit cpboot-daemon usbfs:filesystem mount;
dontaudit cpboot-daemon self:capability mknod;
+dontaudit cpboot-daemon device:chr_file { read write create unlink open };
+dontaudit cpboot-daemon device:dir { write add_name remove_name };
allow cpboot-daemon cgroup:dir { create add_name };
allow cpboot-daemon efs_file:file { read write open };
@@ -16,6 +18,4 @@ allow cpboot-daemon radio_prop:property_service set;
allow cpboot-daemon self:capability { setuid dac_override };
allow cpboot-daemon sysfs:file write;
allow cpboot-daemon userdata_block_device:blk_file { read open };
-allow cpboot-daemon efs_file:dir search;
-allow cpboot-daemon efs_file:file { read write };
-allow cpboot-daemon device:dir { write }; \ No newline at end of file
+allow cpboot-daemon efs_file:dir search; \ No newline at end of file