Update sepolicy/pawlet_device.te
This commit is contained in:
@@ -5,13 +5,13 @@ type pawlet_device_exec, exec_type, file_type, system_file_type;
|
||||
# Inherit from core domain
|
||||
typeattribute pawlet_device coredomain;
|
||||
|
||||
# Property access - use vendor property types
|
||||
# Property access
|
||||
get_prop(pawlet_device, vendor_default_prop)
|
||||
set_prop(pawlet_device, vendor_default_prop)
|
||||
|
||||
# Framework interactions
|
||||
allow pawlet_device framework_res:file { read getattr };
|
||||
# Framework interactions - use standard types
|
||||
allow pawlet_device system_file:file { read getattr };
|
||||
allow pawlet_device system_server:service_manager find;
|
||||
|
||||
# Additional file access permissions
|
||||
# File access for properties
|
||||
allow pawlet_device vendor_default_prop:file { getattr open read map };
|
Reference in New Issue
Block a user