summaryrefslogtreecommitdiff
path: root/sepolicy
diff options
context:
space:
mode:
authorTerry Heo <terryheo@google.com>2015-04-08 15:48:41 +0900
committerTerry Heo <terryheo@google.com>2015-05-07 18:37:18 +0900
commitadbaec3573a961c3d1b062818b8e351f5017f4f1 (patch)
tree8cdcc78a24f176510fbfa69c39940f175c87724a /sepolicy
parent8d3dcedaa2d1d1c3613cbe388399b3e5a8a08b83 (diff)
downloadatv-adbaec3573a961c3d1b062818b8e351f5017f4f1.tar.gz
Add selinux policy to enable access to DVB API on Android TV
Bug: 20112245 Change-Id: I57a58905b0de714d4e9153e61a3bf29ac51624c8
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/device.te2
-rw-r--r--sepolicy/file_contexts2
-rw-r--r--sepolicy/system_service.te1
-rw-r--r--sepolicy/untrusted_app.te1
4 files changed, 6 insertions, 0 deletions
diff --git a/sepolicy/device.te b/sepolicy/device.te
new file mode 100644
index 0000000..adae882
--- /dev/null
+++ b/sepolicy/device.te
@@ -0,0 +1,2 @@
+# DVB API device node
+type dvb_device, dev_type, mlstrustedobject;
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
new file mode 100644
index 0000000..dbb329b
--- /dev/null
+++ b/sepolicy/file_contexts
@@ -0,0 +1,2 @@
+# DVB API device nodes
+/dev/dvb.* u:object_r:dvb_device:s0
diff --git a/sepolicy/system_service.te b/sepolicy/system_service.te
new file mode 100644
index 0000000..d0bef2f
--- /dev/null
+++ b/sepolicy/system_service.te
@@ -0,0 +1 @@
+allow system_server dvb_device:chr_file rw_file_perms;
diff --git a/sepolicy/untrusted_app.te b/sepolicy/untrusted_app.te
new file mode 100644
index 0000000..8f23f4e
--- /dev/null
+++ b/sepolicy/untrusted_app.te
@@ -0,0 +1 @@
+allow untrusted_app dvb_device:chr_file rw_file_perms;