aboutsummaryrefslogtreecommitdiffstats
path: root/gatekeeperd.te
diff options
context:
space:
mode:
Diffstat (limited to 'gatekeeperd.te')
-rw-r--r--gatekeeperd.te3
1 files changed, 3 insertions, 0 deletions
diff --git a/gatekeeperd.te b/gatekeeperd.te
index 39d9d21..ca540c6 100644
--- a/gatekeeperd.te
+++ b/gatekeeperd.te
@@ -3,6 +3,7 @@ type gatekeeperd_exec, exec_type, file_type;
# gatekeeperd
init_daemon_domain(gatekeeperd)
+binder_service(gatekeeperd)
binder_use(gatekeeperd)
allow gatekeeperd tee_device:chr_file rw_file_perms;
@@ -16,6 +17,8 @@ allow gatekeeperd keystore:keystore_key { add_auth };
# For permissions checking
allow gatekeeperd system_server:binder call;
allow gatekeeperd permission_service:service_manager find;
+# For parent user ID lookup
+allow gatekeeperd user_service:service_manager find;
# for SID file access
allow gatekeeperd gatekeeper_data_file:dir rw_dir_perms;