Merge "Allow vendor_init to fix permissions of TEE data file" into udc-d1-dev am: 9fc92bdb28

Original change: https://googleplex-android-review.googlesource.com/c/device/google/zuma-sepolicy/+/23413076

Change-Id: I16f8ebe09908fb8f648e903a2f052783f5eb4040
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Donnie Pollitz 2023-05-26 07:49:59 +00:00 committed by Automerger Merge Worker
commit 5bf2864bf3

View file

@ -11,6 +11,9 @@ allow vendor_init sg_device:chr_file r_file_perms;
allow vendor_init bootdevice_sysdev:file create_file_perms;
allow vendor_init modem_img_file:filesystem { getattr };
# Allow for checking NSP permissions
allow vendor_init tee_data_file:lnk_file read;
userdebug_or_eng(`
allow vendor_init vendor_init:lockdown { integrity };
')