summaryrefslogtreecommitdiffstats
path: root/selinux/macloader.te
diff options
context:
space:
mode:
authorSimon Shields <keepcalm444@gmail.com>2016-02-09 12:22:50 +1100
committerBrett Rogers <brettrogers11@gmail.com>2016-02-13 17:04:14 -0800
commite8c54e0ff69cf7d27f02f12d30442db077cf68f8 (patch)
tree9edd44de98248f54d295e7c63e213bb07a8234fa /selinux/macloader.te
parente0ee8862745fdbe0812af963e8fec8a0da6ec862 (diff)
downloaddevice_samsung_smdk4412-common-e8c54e0ff69cf7d27f02f12d30442db077cf68f8.zip
device_samsung_smdk4412-common-e8c54e0ff69cf7d27f02f12d30442db077cf68f8.tar.gz
device_samsung_smdk4412-common-e8c54e0ff69cf7d27f02f12d30442db077cf68f8.tar.bz2
smdk4412-common: add macloader and tinyplay sepolicy [1/2]
Change-Id: I1dcc6f97ba7f6d95ed92770d5f38d03b4e3b3d57
Diffstat (limited to 'selinux/macloader.te')
-rw-r--r--selinux/macloader.te11
1 files changed, 11 insertions, 0 deletions
diff --git a/selinux/macloader.te b/selinux/macloader.te
new file mode 100644
index 0000000..a3eb4a2
--- /dev/null
+++ b/selinux/macloader.te
@@ -0,0 +1,11 @@
+type macloader, domain;
+type macloader_exec, exec_type, file_type;
+init_daemon_domain(macloader);
+
+allow macloader efs_file:dir search;
+allow macloader efs_device_file:dir search;
+allow macloader wifi_data_file:file { read getattr open write setattr };
+allow macloader self:capability { dac_override chown fowner fsetid };
+allow macloader system_data_file:dir w_dir_perms;
+
+domain_trans(init, rootfs, macloader)