author | Liang Ji <liang.ji@amlogic.com> | 2020-06-24 03:02:01 (GMT) |
---|---|---|
committer | Liang Ji <liang.ji@amlogic.com> | 2020-06-24 03:02:01 (GMT) |
commit | 19108e025e8336af062b242c76ba39a02514c6ec (patch) | |
tree | 05fb8ff1fbd51c9956d08ad90d3058028fb9d74b | |
parent | c65188525b0845c2a632aaa020e3de198515c0a6 (diff) | |
download | common-19108e025e8336af062b242c76ba39a02514c6ec.zip common-19108e025e8336af062b242c76ba39a02514c6ec.tar.gz common-19108e025e8336af062b242c76ba39a02514c6ec.tar.bz2 |
selinux: change the access for factory_vendor_file dir [1/1]
PD#GH-495
BUG=159573308
Problem:
dir has the create access
Solution:
r access for dir is enough
Verify:
sabrina
Signed-off-by: Liang Ji <liang.ji@amlogic.com>
Change-Id: Ibb670bba716c7afa5f80628f2a8cf82c61c69aab
-rwxr-xr-x | sepolicy/tee.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/tee.te b/sepolicy/tee.te index 681d3a2..bccdfbc 100755 --- a/sepolicy/tee.te +++ b/sepolicy/tee.te @@ -28,5 +28,5 @@ allow tee tee:capability { net_raw }; allow tee port:tcp_socket { name_bind }; allow tee node:tcp_socket { node_bind }; -allow tee factory_vendor_file:dir create_dir_perms; +allow tee factory_vendor_file:dir r_dir_perms; allow tee factory_vendor_file:file r_file_perms; |