60b467ac40
Bug: 312582937 Test: make selinux_policy Change-Id: Ic6e1f6228764cd2ddc96d574a10838ca4bc05332 Signed-off-by: Randall Huang <huangrandall@google.com>
16 lines
520 B
Text
16 lines
520 B
Text
# Handle wake locks
|
|
wakelock_use(tee)
|
|
|
|
allow tee persist_ss_file:file create_file_perms;
|
|
allow tee persist_ss_file:dir create_dir_perms;
|
|
allow tee persist_file:dir r_dir_perms;
|
|
allow tee mnt_vendor_file:dir r_dir_perms;
|
|
allow tee tee_data_file:dir rw_dir_perms;
|
|
allow tee tee_data_file:lnk_file r_file_perms;
|
|
allow tee tee_persist_block_device:blk_file rw_file_perms;
|
|
allow tee block_device:dir search;
|
|
|
|
# Allow storageproxyd access to gsi_public_metadata_file
|
|
read_fstab(tee)
|
|
|
|
set_prop(tee, vendor_trusty_storage_prop)
|