sepolicy: add missing core_data_file_type to pawletcache_policy_file

sepolicy_test requires every /data/ label to carry core_data_file_type.
This commit is contained in:
2026-08-18 14:07:27 -07:00
parent 4f6d8e9284
commit 2f19f3ed9e
+1 -1
View File
@@ -32,7 +32,7 @@ allow pawlet_cache servicediscovery_service:service_manager find;
# Enterprise policy override, written by pawletprofiled
# (git.oxmc.me/PawletOS/profiled — see PolicyOverride.kt). Write-side
# sepolicy rule lives in that repo's pawletprofiled.te.
type pawletcache_policy_file, file_type, data_file_type;
type pawletcache_policy_file, file_type, data_file_type, core_data_file_type;
allow pawlet_cache pawletcache_policy_file:file { read open getattr };
allow pawlet_cache pawletcache_policy_file:dir { read open getattr search };