diff options
Diffstat (limited to 'selinux/kickstart.te')
| -rwxr-xr-x | selinux/kickstart.te | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/selinux/kickstart.te b/selinux/kickstart.te index 14e1ad5..d663145 100755 --- a/selinux/kickstart.te +++ b/selinux/kickstart.te @@ -13,7 +13,7 @@ allow kickstart kickstart_exec:file { open execute_no_trans getattr }; # Run dd on m9kefs[123] block devices; write to /data/qcks/ # Run cat on firmware and m9kefs[123] data; write to /data/qcks/ -allow kickstart efs_block_device:blk_file rw_file_perms; +allow kickstart mmc_block_device:blk_file { getattr read write open }; allow kickstart kickstart_data_file:file create_file_perms; allow kickstart kickstart_data_file:dir rw_dir_perms; allow kickstart radio_efs_file:file r_file_perms; @@ -41,4 +41,12 @@ allow kickstart shell_exec:file entrypoint; allow kickstart self:capability { dac_override setuid }; # XXX Label sysfs files with a specific type? -allow kickstart sysfs:file rw_file_perms;
\ No newline at end of file +allow kickstart sysfs:file rw_file_perms; + +allow kickstart unlabeled:file { setattr getattr read write open }; +allow kickstart vfat:file { getattr read open }; +allow kickstart kickstart:process { execmem }; +#allow kickstart usbfs:filesystem { mount }; +allow kickstart usbfs:dir { search }; +#allow kickstart system_file:file { entrypoint }; +allow kickstart vfat:dir { search }; |