From f48e98704326860fba7d1971bb7c649db22038e1 Mon Sep 17 00:00:00 2001 From: oxmc Date: Tue, 19 Aug 2025 12:35:06 -0700 Subject: [PATCH] Update sepolicy/pawlet_device.te --- sepolicy/pawlet_device.te | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/sepolicy/pawlet_device.te b/sepolicy/pawlet_device.te index 8c0b1ea..b43139f 100644 --- a/sepolicy/pawlet_device.te +++ b/sepolicy/pawlet_device.te @@ -5,13 +5,13 @@ type pawlet_device_exec, exec_type, file_type, system_file_type; # Inherit from core domain typeattribute pawlet_device coredomain; -# Property access - use vendor property types +# Property access get_prop(pawlet_device, vendor_default_prop) set_prop(pawlet_device, vendor_default_prop) -# Framework interactions -allow pawlet_device framework_res:file { read getattr }; +# Framework interactions - use standard types +allow pawlet_device system_file:file { read getattr }; allow pawlet_device system_server:service_manager find; -# Additional file access permissions +# File access for properties allow pawlet_device vendor_default_prop:file { getattr open read map }; \ No newline at end of file