summaryrefslogtreecommitdiffstats
path: root/sepolicy/tee.te
diff options
context:
space:
mode:
Diffstat (limited to 'sepolicy/tee.te')
-rw-r--r--sepolicy/tee.te8
1 files changed, 8 insertions, 0 deletions
diff --git a/sepolicy/tee.te b/sepolicy/tee.te
new file mode 100644
index 0000000..59e7894
--- /dev/null
+++ b/sepolicy/tee.te
@@ -0,0 +1,8 @@
+# tee_data_file cannot be used as it has data_file_type,
+# which triggers 'neverallow' for 'recovery' domain.
+type tee_file, file_type;
+
+allow tee unlabeled:dir search;
+allow tee tee_file:dir rw_dir_perms;
+allow tee tee_file:file create_file_perms;
+allow tee labeledfs:filesystem associate;