Merge "trusty: Fix selinux denials for block devices" into main

This commit is contained in:
Treehugger Robot 2023-11-29 02:37:08 +00:00 committed by Android (Google) Code Review
commit a47912cabc
4 changed files with 4 additions and 5 deletions

View file

@ -7,7 +7,6 @@ allow tee persist_file:dir r_dir_perms;
allow tee mnt_vendor_file:dir r_dir_perms;
allow tee tee_data_file:dir rw_dir_perms;
allow tee tee_data_file:lnk_file r_file_perms;
allow tee tee_persist_block_device:blk_file rw_file_perms;
allow tee block_device:dir search;
# Allow storageproxyd access to gsi_public_metadata_file

View file

@ -1,2 +0,0 @@
# b/312894027
dontaudit tee tee_userdata_block_device:blk_file { read write };

2
vendor/device.te vendored
View file

@ -1 +1,3 @@
type lwis_device, dev_type;
type tee_persist_block_device, dev_type;
type tee_userdata_block_device, dev_type;

4
vendor/tee.te vendored
View file

@ -1,2 +1,2 @@
type tee_persist_block_device, dev_type;
type tee_userdata_block_device, dev_type;
allow tee tee_persist_block_device:blk_file rw_file_perms;
allow tee tee_userdata_block_device:blk_file rw_file_perms;