tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

am 274d2927: Clean up remaining denials.

Browse source 
* commit '274d2927a7ccbfd266c83d6da5e9e2772805fbd5':
  Clean up remaining denials.
This commit is contained in:
gcondra@google.com 2013-05-23 19:16:15 -07:00 committed by Android Git Automerger
commit 95c960debc
3 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
tee.te
View file

@ -7,5 +7,5 @@ type tee_device, dev_type;
type tee_data_file, file_type, data_file_type;
permissive tee;
unconfined_domain(netd)
unconfined_domain(tee)
init_daemon_domain(tee)

2
unconfined.te
View file

@ -14,7 +14,7 @@ allow unconfineddomain fs_type:filesystem *;
allow unconfineddomain {fs_type dev_type file_type}:{ dir blk_file lnk_file sock_file fifo_file } *;
allow unconfineddomain {fs_type dev_type file_type}:{ chr_file file } ~entrypoint;
allow unconfineddomain node_type:node *;
allow unconfineddomain node_type:{ tcp_socket udp_socket } node_bind;
allow unconfineddomain node_type:{ tcp_socket udp_socket rawip_socket } node_bind;
allow unconfineddomain netif_type:netif *;
allow unconfineddomain port_type:socket_class_set name_bind;
allow unconfineddomain port_type:{ tcp_socket dccp_socket } name_connect;

1
watchdogd.te
View file

@ -2,3 +2,4 @@
type watchdogd, domain;
permissive watchdogd;
unconfined_domain(watchdogd)
allow watchdogd rootfs:file entrypoint;