summaryrefslogtreecommitdiff
authorTreeHugger Robot <treehugger-gerrit@google.com>2019-08-13 05:58:27 (GMT)
committer Android Partner Code Review <android-gerrit-partner@google.com>2019-08-13 05:58:27 (GMT)
commit42a91e6c9ca43c3d5edd4b4bff4f4230f8b7b625 (patch)
tree43662adce0ca5c72f1af86f8dc7bdc3fcb39634a
parent6e51f0fc7ff87b75d9b68eca8328538afb433b0b (diff)
parentc430a2bbffeac3d8df9347f8bf5c877704906f26 (diff)
downloadcommon-42a91e6c9ca43c3d5edd4b4bff4f4230f8b7b625.zip
common-42a91e6c9ca43c3d5edd4b4bff4f4230f8b7b625.tar.gz
common-42a91e6c9ca43c3d5edd4b4bff4f4230f8b7b625.tar.bz2
Merge "provision: add tee_key_inject service [2/2]" into p-tv-dev
Diffstat
-rw-r--r--sepolicy/file_contexts1
-rwxr-xr-xsepolicy/tee.te2
2 files changed, 2 insertions, 1 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index d3c34c6..b8c589d 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -266,6 +266,7 @@
/vendor/bin/tee-supplicant u:object_r:tee_exec:s0
/vendor/bin/tee_hdcp u:object_r:tee_exec:s0
/vendor/bin/tee_preload_fw u:object_r:firmload_exec:s0
+/vendor/bin/tee_key_inject u:object_r:tee_exec:s0
/vendor/bin/tvserver u:object_r:tvserver_exec:s0
#/vendor/bin/wlan_fwloader u:object_r:wlan_fwloader_exec:s0
diff --git a/sepolicy/tee.te b/sepolicy/tee.te
index 8dfa6fa..70c5d51 100755
--- a/sepolicy/tee.te
+++ b/sepolicy/tee.te
@@ -11,7 +11,7 @@ allow tee tee_data_file:file { write create open unlink link read };
allow tee system_data_file:file read;
allow tee mnt_vendor_file:dir { add_name create remove_name write };
-allow tee mnt_vendor_file:file { create open read rename write unlink link };
+allow tee mnt_vendor_file:file { create open read rename write unlink link getattr };
allow tee mnt_vendor_file:dir { search ioctl open read rmdir getattr };
allow tee unlabeled:dir { add_name write remove_name };