[GitHub/LineageOS/android_device_samsung_slsi_sepolicy.git] / tee / mobicore / tee.te

allow tee efs_file:dir { search getattr };
allow tee efs_file:file r_file_perms;
allow tee gatekeeper_efs_file:dir r_dir_perms;
allow tee gatekeeper_efs_file:file r_file_perms;
allow tee init:unix_stream_socket connectto;
allow tee property_socket:sock_file write;
allow tee prov_efs_file:dir search;
allow tee system_prop:property_service set;
allow tee tee_prop:property_service set;

# /dev/t-base-tui
allow tee tee_device:chr_file r_file_perms;

allow tee mobicore_vendor_data_file:dir r_dir_perms;
allow tee mobicore_vendor_data_file:file rw_file_perms;
Commit	Line	Data
fab78920 HG	1	allow tee efs_file:dir { search getattr };
	2	allow tee efs_file:file r_file_perms;
	3	allow tee gatekeeper_efs_file:dir r_dir_perms;
	4	allow tee gatekeeper_efs_file:file r_file_perms;
	5	allow tee init:unix_stream_socket connectto;
	6	allow tee property_socket:sock_file write;
	7	allow tee prov_efs_file:dir search;
	8	allow tee system_prop:property_service set;
	9	allow tee tee_prop:property_service set;
	10
	11	# /dev/t-base-tui
	12	allow tee tee_device:chr_file r_file_perms;
	13
	14	allow tee mobicore_vendor_data_file:dir r_dir_perms;
	15	allow tee mobicore_vendor_data_file:file rw_file_perms;