blob: 38edd9f6541399e3eaa3da6b35a30c7ca4180186 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
init_daemon_domain(credmgrd)
allow credmgrd credmgrd_socket:dir rw_dir_perms;
allow credmgrd credmgrd_socket:sock_file create_file_perms;
allow credmgrd firmware_file:dir search;
allow credmgrd firmware_file:file r_file_perms;
allow credmgrd ion_device:chr_file rw_file_perms;
allow credmgrd tad:unix_stream_socket connectto;
allow credmgrd tad_socket:sock_file rw_file_perms;
allow credmgrd tee_device:chr_file rw_file_perms;
allow credmgrd vendor_toolbox_exec:file rx_file_perms;
allow credmgrd cache_file:dir create_dir_perms;
allow credmgrd cache_file:file create_file_perms;
# Needed to create /data/credmgr
allow credmgrd system_data_root_file:dir { create_dir_perms relabelfrom };
allow credmgrd credmgrd_data_file:dir { create_dir_perms relabelto };
allow credmgrd credmgrd_data_file:file create_file_perms;
# Allow suntrold.sh to start suntrold
allow credmgrd credmgrd_exec:file rx_file_perms;
set_prop(credmgrd, credmgrd_prop)
|
