Files
FrameworkAPI/sepolicy/pawlet_device.te
2025-08-19 12:35:06 -07:00

17 lines
549 B
Plaintext

# Type declarations
type pawlet_device, domain;
type pawlet_device_exec, exec_type, file_type, system_file_type;
# Inherit from core domain
typeattribute pawlet_device coredomain;
# Property access
get_prop(pawlet_device, vendor_default_prop)
set_prop(pawlet_device, vendor_default_prop)
# Framework interactions - use standard types
allow pawlet_device system_file:file { read getattr };
allow pawlet_device system_server:service_manager find;
# File access for properties
allow pawlet_device vendor_default_prop:file { getattr open read map };