Allow vendor_init to fix permissions of TEE data file

Background:
* vendor_init needs to be able to possibly fix ownership of
  tee_data_file

Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I2363f9ff695209bbf7b6661c8e9eb3b376b84ace
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
This commit is contained in:
Donnie Pollitz 2023-05-24 16:44:07 +02:00
parent 86cb19bb2f
commit 16440338de

View file

@ -11,6 +11,9 @@ allow vendor_init sg_device:chr_file r_file_perms;
allow vendor_init bootdevice_sysdev:file create_file_perms;
allow vendor_init modem_img_file:filesystem { getattr };
# Allow for checking NSP permissions
allow vendor_init tee_data_file:lnk_file read;
userdebug_or_eng(`
allow vendor_init vendor_init:lockdown { integrity };
')