diff options
| -rw-r--r-- | sepolicy/vendor/init_fingerprint.te | 4 | ||||
| -rw-r--r-- | sepolicy/vendor/tee.te | 2 |
2 files changed, 5 insertions, 1 deletions
diff --git a/sepolicy/vendor/init_fingerprint.te b/sepolicy/vendor/init_fingerprint.te index b45cdd6..9ef78c4 100644 --- a/sepolicy/vendor/init_fingerprint.te +++ b/sepolicy/vendor/init_fingerprint.te @@ -11,4 +11,6 @@ allow init_fingerprint vendor_toolbox_exec:file rx_file_perms; # Allow to delete file allow init_fingerprint persist_file:dir search; allow init_fingerprint persist_drm_file:dir { read search open write remove_name }; -allow init_fingerprint persist_drm_file:file { getattr unlink };
\ No newline at end of file +allow init_fingerprint persist_drm_file:file { getattr unlink }; + +allow init_fingerprint system_data_file:file getattr; diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 0a124bc..6c2c9b1 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -4,3 +4,5 @@ typeattribute tee data_between_core_and_vendor_violators; allow tee system_data_file:dir r_dir_perms; allow tee fingerprintd_data_file:dir rw_dir_perms; allow tee fingerprintd_data_file:file create_file_perms; +allow tee vendor_data_file:file { read open unlink }; +allow tee vendor_data_file:dir { write remove_name read }; |