platform_system_sepolicy/tee.te

##
# trusted execution environment (tee) daemon
#
type tee, domain;
type tee_exec, exec_type, file_type;
type tee_device, dev_type;
type tee_data_file, file_type, data_file_type;

permissive tee;
unconfined_domain(tee)
init_daemon_domain(tee)
Trusted Execution Environment policy. 2012-08-13 12:09:39 +02:00			`##`
			`# trusted execution environment (tee) daemon`
			`#`
			`type tee, domain;`
			`type tee_exec, exec_type, file_type;`
			`type tee_device, dev_type;`
			`type tee_data_file, file_type, data_file_type;`

Make all domains unconfined. This prevents denials from being generated by the base policy. Over time, these rules will be incrementally tightened to improve security. Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11 2013-05-18 02:11:29 +02:00			`permissive tee;`
Clean up remaining denials. Bug: 8424461 Change-Id: I8f0b01cdb19b4a479d5de842f4e4844aeab00622 2013-05-22 22:19:58 +02:00			`unconfined_domain(tee)`
Trusted Execution Environment policy. 2012-08-13 12:09:39 +02:00			`init_daemon_domain(tee)`