aboutsummaryrefslogtreecommitdiff
path: root/sepolicy/credmgrd.te
diff options
context:
space:
mode:
authorKeita Espinoza <clouddarkgenesis@gmail.com>2017-07-18 01:29:11 +0000
committerSteven Lay <arbiter1000@gmail.com>2017-08-04 14:12:08 +0000
commit3cbc628bb1a5b7ee0b5096c9c6390b843812cea1 (patch)
treee763bc515b15a9d221c3bf5db28f51bd6f20fcc9 /sepolicy/credmgrd.te
parent51a7e01103b10d88bda3f0dae87a69dd7ffa39f6 (diff)
shinano: Rework In Device Diagnostics sepolicy
- Fix symlinking and reading denials for iddd and credmgrd Change-Id: I786301f2cb4f2aaa76e8f5b96a036ada0563463b
Diffstat (limited to 'sepolicy/credmgrd.te')
-rw-r--r--sepolicy/credmgrd.te1
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/credmgrd.te b/sepolicy/credmgrd.te
index 78db47a..b354cda 100644
--- a/sepolicy/credmgrd.te
+++ b/sepolicy/credmgrd.te
@@ -49,6 +49,7 @@ allow credmgrd iddd_file:dir search;
allow credmgrd iddd_file:sock_file write;
allow credmgrd iddd_file:unix_stream_socket connectto;
allow credmgrd iddd_file:unix_dgram_socket sendto;
+allow credmgrd iddd_file:lnk_file { read };
#/mnt/idd is tmpfs
allow credmgrd tmpfs:dir search;