diff --git a/sepolicy/pawlet_device.te b/sepolicy/pawlet_device.te index 8c0b1ea..b43139f 100644 --- a/sepolicy/pawlet_device.te +++ b/sepolicy/pawlet_device.te @@ -5,13 +5,13 @@ type pawlet_device_exec, exec_type, file_type, system_file_type; # Inherit from core domain typeattribute pawlet_device coredomain; -# Property access - use vendor property types +# Property access get_prop(pawlet_device, vendor_default_prop) set_prop(pawlet_device, vendor_default_prop) -# Framework interactions -allow pawlet_device framework_res:file { read getattr }; +# Framework interactions - use standard types +allow pawlet_device system_file:file { read getattr }; allow pawlet_device system_server:service_manager find; -# Additional file access permissions +# File access for properties allow pawlet_device vendor_default_prop:file { getattr open read map }; \ No newline at end of file