sepolicy: add missing core_data_file_type to pawletcache_policy_file
sepolicy_test requires every /data/ label to carry core_data_file_type.
This commit is contained in:
@@ -32,7 +32,7 @@ allow pawlet_cache servicediscovery_service:service_manager find;
|
||||
# Enterprise policy override, written by pawletprofiled
|
||||
# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Write-side
|
||||
# sepolicy rule lives in that repo's pawletprofiled.te.
|
||||
type pawletcache_policy_file, file_type, data_file_type;
|
||||
type pawletcache_policy_file, file_type, data_file_type, core_data_file_type;
|
||||
allow pawlet_cache pawletcache_policy_file:file { read open getattr };
|
||||
allow pawlet_cache pawletcache_policy_file:dir { read open getattr search };
|
||||
|
||||
|
||||
Reference in New Issue
Block a user