From e7bb6cadb718b08ad5eda273f2f947993bbbf6ae Mon Sep 17 00:00:00 2001
From: oxmc <oxmc@noreply.localhost>
Date: Tue, 19 Aug 2025 12:24:49 -0700
Subject: [PATCH] Update sepolicy/pawlet_device.te

---
 sepolicy/pawlet_device.te | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/sepolicy/pawlet_device.te b/sepolicy/pawlet_device.te
index e821659..8c0b1ea 100644
--- a/sepolicy/pawlet_device.te
+++ b/sepolicy/pawlet_device.te
@@ -5,10 +5,13 @@ type pawlet_device_exec, exec_type, file_type, system_file_type;
 # Inherit from core domain
 typeattribute pawlet_device coredomain;
 
-# Property access
-get_prop(pawlet_device, oxmc_prop)
-set_prop(pawlet_device, oxmc_prop)
+# Property access - use vendor property types
+get_prop(pawlet_device, vendor_default_prop)
+set_prop(pawlet_device, vendor_default_prop)
 
 # Framework interactions
 allow pawlet_device framework_res:file { read getattr };
-allow pawlet_device system_server:service_manager find;
\ No newline at end of file
+allow pawlet_device system_server:service_manager find;
+
+# Additional file access permissions
+allow pawlet_device vendor_default_prop:file { getattr open read map };
\ No newline at end of file