blob: db895dddbdad1b89402af06661165d408134e21a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
type hal_gatekeeper_remote, domain;
hal_server_domain(hal_gatekeeper_remote, hal_gatekeeper)
type hal_gatekeeper_remote_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_gatekeeper_remote)
type gatekeeper_device, file_type;
allow hal_gatekeeper_remote device:dir r_dir_perms;
allow hal_gatekeeper_remote gatekeeper_device:chr_file rw_file_perms;
# Write to kernel log (/dev/kmsg)
allow hal_gatekeeper_remote kmsg_device:chr_file w_file_perms;
allow hal_gatekeeper_remote kmsg_device:chr_file getattr;
|
