device_google_zuma/vendor/trusty_apploader.te
Donnie Pollitz 1df4e2dde8 sepolicy: Fix trusty_apploader avc denials
* File permissions missing

Bug: 263305034
Test: ran com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot

Change-Id: I5d0a56a4c31c66610414341118c4089d2c11f3e9
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-02-06 08:57:22 +00:00

7 lines
324 B
Text

type trusty_apploader, domain;
type trusty_apploader_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(trusty_apploader)
allow trusty_apploader ion_device:chr_file r_file_perms;
allow trusty_apploader tee_device:chr_file rw_file_perms;
allow trusty_apploader dmabuf_system_heap_device:chr_file r_file_perms;