summaryrefslogtreecommitdiffstats
path: root/selinux/untrusted_app.te
diff options
context:
space:
mode:
authorrogersb11 <brettrogers11@gmail.com>2015-11-12 04:51:38 -0500
committerBrett Rogers <brettrogers11@gmail.com>2015-12-02 09:54:17 -0800
commit04de314e155a00e7299305c6f0ca05fd47045926 (patch)
tree6ca57022949b1aab04a7573b5b54a370ab4c5b96 /selinux/untrusted_app.te
parent5b06fdd56bba9aeee7959794217d296c47d48945 (diff)
downloaddevice_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.tar.gz
device_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.tar.bz2
device_samsung_t0lte-04de314e155a00e7299305c6f0ca05fd47045926.zip
Update sepolicy for M (WIP)
Change-Id: I668e299e7c6d9927144e3eedf59d559dfa8d0b23
Diffstat (limited to 'selinux/untrusted_app.te')
-rw-r--r--selinux/untrusted_app.te6
1 files changed, 6 insertions, 0 deletions
diff --git a/selinux/untrusted_app.te b/selinux/untrusted_app.te
new file mode 100644
index 0000000..e4106d5
--- /dev/null
+++ b/selinux/untrusted_app.te
@@ -0,0 +1,6 @@
+allow untrusted_app block_device:dir { open read search };
+allow untrusted_app log_device:chr_file { open write };
+allow untrusted_app kernel:system { module_request };
+allow untrusted_app firmware_camera:dir { read getattr open };
+allow untrusted_app firmware_camera:file getattr;
+allow untrusted_app firmware_mfc:file getattr;