diff options
| -rw-r--r-- | vrcore/sepolicy/vrcore_app.te | 1 | ||||
| -rw-r--r-- | vrcore/sepolicy_mtc/vrcore_app.te | 16 |
2 files changed, 17 insertions, 0 deletions
diff --git a/vrcore/sepolicy/vrcore_app.te b/vrcore/sepolicy/vrcore_app.te index e12040a..d827641 100644 --- a/vrcore/sepolicy/vrcore_app.te +++ b/vrcore/sepolicy/vrcore_app.te @@ -5,6 +5,7 @@ ### type vrcore_app, domain; +type vrcore_app_tmpfs, file_type; app_domain(vrcore_app) net_domain(vrcore_app) diff --git a/vrcore/sepolicy_mtc/vrcore_app.te b/vrcore/sepolicy_mtc/vrcore_app.te new file mode 100644 index 0000000..3dda5f2 --- /dev/null +++ b/vrcore/sepolicy_mtc/vrcore_app.te @@ -0,0 +1,16 @@ +### +### MTC specific VrCore permissions +### + +allow vrcore_app persist_file:dir search; + +# allow vrcore to access dsp +allow vrcore_app qdsp_device:chr_file r_file_perms; +r_dir_file(vrcore_app, adsprpcd_file) + +# allow vrcore to access sensor service +allow vrcore_app fwk_sensor_hwservice:hwservice_manager find; +allow vrcore_app sensorservice_service:service_manager find; + +# allow vrcore to access /persist/tango/calibration.xml +r_dir_file(vrcore_app, tango_data_file);
\ No newline at end of file |