path: root/selinux/untrusted_app.te

allow untrusted_app unlabeled:file getattr;
allow untrusted_app efs_file:dir getattr;
allow untrusted_app kernel:system module_request;
allow untrusted_app log_device:dir search;
allow untrusted_app log_device:chr_file { write read open };