wayne: sepolicy: Initial denials

Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>

1 files changed, 2 insertions, 0 deletions

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
new file mode 100644
index 0000000..c658e69
--- /dev/null
+++ b/sepolicy/system_server.te
@@ -0,0 +1,2 @@
+#============= system_server ==============
+allow system_server vendor_file:file { execute getattr open read };