9d87c647af
Add rules to allow /sbin/slideshow to access framebuffer and input devices at early stages of boot, and rules to allow init to execute the program (from init.rc using exec). Needed by changes from I58c79a7f3ac747eec0d73a10f018d3d8ade9df7d Change-Id: I1d5018feb7025853f0bf81651f497fef8c3a6ab0
13 lines
505 B
Text
13 lines
505 B
Text
# slideshow seclabel is specified in init.rc since
|
|
# it lives in the rootfs and has no unique file type.
|
|
type slideshow, domain;
|
|
|
|
write_klog(slideshow)
|
|
allow slideshow device:dir r_dir_perms;
|
|
allow slideshow self:capability { mknod sys_tty_config };
|
|
allow slideshow graphics_device:dir r_dir_perms;
|
|
allow slideshow graphics_device:chr_file rw_file_perms;
|
|
allow slideshow input_device:dir r_dir_perms;
|
|
allow slideshow input_device:chr_file r_file_perms;
|
|
allow slideshow tty_device:chr_file rw_file_perms;
|
|
|