common: Allow macloader to access efs files

Change-Id: Ia31b51d0397a23ae203aa22ac6277cca239d1883

diff --git a/common/vendor/macloader.te b/common/vendor/macloader.te
index f82a98728c782c4621c8212f56cd8f9138f8d632..f82dff66903310cb6bb623ec0dd666800cc74999 100644 (file)
--- a/common/vendor/macloader.te
+++ b/common/vendor/macloader.te
@@ -15,6 +15,16 @@ allowxperm macloader self:udp_socket ioctl { 0x8913 0x8914 };
 allow macloader conn_vendor_data_file:dir rw_dir_perms;
 allow macloader conn_vendor_data_file:file create_file_perms;
 
+# /mnt/vendor
+allow macloader mnt_vendor_file:dir search;
+
+# /mnt/vendor/efs
+allow macloader efs_file:dir rw_dir_perms;
+
+# /mnt/vendor/efs/wifi
+allow macloader wifi_efs_file:dir rw_dir_perms;
+allow macloader wifi_efs_file:file rw_file_perms;
+
 # /sys/class/net
 allow macloader sysfs_net:dir r_dir_perms;
 allow macloader sysfs_net:file r_file_perms;