diff --git a/sepolicy/pawlet_device.te b/sepolicy/pawlet_device.te index e821659..8c0b1ea 100644 --- a/sepolicy/pawlet_device.te +++ b/sepolicy/pawlet_device.te @@ -5,10 +5,13 @@ type pawlet_device_exec, exec_type, file_type, system_file_type; # Inherit from core domain typeattribute pawlet_device coredomain; -# Property access -get_prop(pawlet_device, oxmc_prop) -set_prop(pawlet_device, oxmc_prop) +# Property access - use vendor property types +get_prop(pawlet_device, vendor_default_prop) +set_prop(pawlet_device, vendor_default_prop) # Framework interactions allow pawlet_device framework_res:file { read getattr }; -allow pawlet_device system_server:service_manager find; \ No newline at end of file +allow pawlet_device system_server:service_manager find; + +# Additional file access permissions +allow pawlet_device vendor_default_prop:file { getattr open read map }; \ No newline at end of file