diff options
Diffstat (limited to 'sepolicy/untrusted_app.te')
| -rw-r--r-- | sepolicy/untrusted_app.te | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/untrusted_app.te b/sepolicy/untrusted_app.te index adaf51a..a937288 100644 --- a/sepolicy/untrusted_app.te +++ b/sepolicy/untrusted_app.te @@ -1,2 +1,7 @@ allow untrusted_app ump_device:chr_file { open read write ioctl }; +allow untrusted_app block_device:dir { open read search }; +allow untrusted_app kernel:system { module_request }; +allow untrusted_app firmware_camera:dir { read getattr open }; +allow untrusted_app firmware_camera:file getattr; +allow untrusted_app firmware_mfc:file getattr; |