Merge "trusty: Fix selinux denials for block devices" into main
This commit is contained in:
commit
a47912cabc
4 changed files with 4 additions and 5 deletions
1
legacy/zuma/vendor/tee.te
vendored
1
legacy/zuma/vendor/tee.te
vendored
|
@ -7,7 +7,6 @@ allow tee persist_file:dir r_dir_perms;
|
|||
allow tee mnt_vendor_file:dir r_dir_perms;
|
||||
allow tee tee_data_file:dir rw_dir_perms;
|
||||
allow tee tee_data_file:lnk_file r_file_perms;
|
||||
allow tee tee_persist_block_device:blk_file rw_file_perms;
|
||||
allow tee block_device:dir search;
|
||||
|
||||
# Allow storageproxyd access to gsi_public_metadata_file
|
||||
|
|
|
@ -1,2 +0,0 @@
|
|||
# b/312894027
|
||||
dontaudit tee tee_userdata_block_device:blk_file { read write };
|
2
vendor/device.te
vendored
2
vendor/device.te
vendored
|
@ -1 +1,3 @@
|
|||
type lwis_device, dev_type;
|
||||
type tee_persist_block_device, dev_type;
|
||||
type tee_userdata_block_device, dev_type;
|
||||
|
|
4
vendor/tee.te
vendored
4
vendor/tee.te
vendored
|
@ -1,2 +1,2 @@
|
|||
type tee_persist_block_device, dev_type;
|
||||
type tee_userdata_block_device, dev_type;
|
||||
allow tee tee_persist_block_device:blk_file rw_file_perms;
|
||||
allow tee tee_userdata_block_device:blk_file rw_file_perms;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue