summaryrefslogtreecommitdiffstats
path: root/sepolicy/tee.te
diff options
context:
space:
mode:
authorLuden <luden@ghostmail.com>2016-03-17 20:19:12 +0000
committerZiyan <jaraidaniel@gmail.com>2016-04-03 15:49:30 +0200
commit3977f65b1374e3365f69695771afe886165564d6 (patch)
treea146b3b6135fc94fa2f4e62b54ed677f9bce4d6f /sepolicy/tee.te
parent3c60373689a44efea9a87b6cdac148530b02d775 (diff)
downloaddevice_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.zip
device_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.tar.gz
device_samsung_tuna-3977f65b1374e3365f69695771afe886165564d6.tar.bz2
Implemented SELinux rules for tuna.
Change-Id: I0c82e620532cf968341cc8c5d268aa0788ebb94f
Diffstat (limited to 'sepolicy/tee.te')
-rw-r--r--sepolicy/tee.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/sepolicy/tee.te b/sepolicy/tee.te
new file mode 100644
index 0000000..59e7894
--- /dev/null
+++ b/sepolicy/tee.te
@@ -0,0 +1,8 @@
+# tee_data_file cannot be used as it has data_file_type,
+# which triggers 'neverallow' for 'recovery' domain.
+type tee_file, file_type;
+
+allow tee unlabeled:dir search;
+allow tee tee_file:dir rw_dir_perms;
+allow tee tee_file:file create_file_perms;
+allow tee labeledfs:filesystem associate;