summaryrefslogtreecommitdiff
path: root/sepolicy/private/ramoops.te
blob: 57161d954fe242822d825167d6cdaa006191d2e6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
type ramoops, domain, coredomain;
type ramoops_data_file, file_type, data_file_type;
type ramoops_exec, exec_type, file_type;

init_daemon_domain(ramoops);

# kmod=crypto-gcm(aes)
dontaudit ramoops kernel:system module_request;

allow ramoops ramoops_exec:file rx_file_perms;
allow ramoops shell_exec:file rx_file_perms;
allow ramoops toolbox_exec:file rx_file_perms;

# Set the sys.ramoops.decrypted property
set_prop(ramoops, ramoops_prop);

allow ramoops sysfs_pstore:file rw_file_perms;
allow ramoops ramoops_device:chr_file rw_file_perms;
allow ramoops ramoops_data_file:file create_file_perms;
allow ramoops ramoops_data_file:dir rw_dir_perms;