path: root/sepolicy/priv_app.te (plain)
blob: 2b0288314b07f4a4de56330b74daf93be085a157

1	allow priv_app fuseblk:dir { search };
2	allow priv_app fuseblk:file { read open getattr };
3	allow priv_app proc_modules:file { getattr read open };
4	allow priv_app proc_interrupts:file { getattr read open };
5
6	allow priv_app media_prop:file { read };
7	allow priv_app dvb_device:chr_file rw_file_perms;
8	#allow priv_app property_socket:sock_file { write };
9
10	allow priv_app vendor_file:file { open read getattr execute };
11
12	allow priv_app zygote:dir { search read };
13	allow priv_app zygote:file { open read };
14	allow priv_app device:dir { read search open };
15
16	allow priv_app { su_exec bootanim_exec bootstat_exec }:file { getattr };
17