diff options
author | Jorge Lucangeli Obes <jorgelo@google.com> | 2015-11-06 19:45:03 +0000 |
---|---|---|
committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2015-11-06 19:45:03 +0000 |
commit | dc443670840a6b6b7c2ba93c9a3cc697e833829b (patch) | |
tree | 57d5184f1adefa181a9cb9b1b4408028bf86d311 | |
parent | 455e4bf5ddc31fa987ba26c34b006297c52c6e6f (diff) | |
parent | 00ef09e1ce668eac66f7a84e6c3a2f7f76f510f1 (diff) | |
download | example-ledflasher-dc443670840a6b6b7c2ba93c9a3cc697e833829b.tar.gz |
Merge "LED flasher: Use Brillo SELinux macros."
-rw-r--r-- | sepolicy/ledflasher.te | 7 | ||||
-rw-r--r-- | sepolicy/ledservice.te | 5 |
2 files changed, 3 insertions, 9 deletions
diff --git a/sepolicy/ledflasher.te b/sepolicy/ledflasher.te index 9da01ab..232aa34 100644 --- a/sepolicy/ledflasher.te +++ b/sepolicy/ledflasher.te @@ -1,9 +1,6 @@ -# Domain for LED Service daemon. +# Domain for LED Flasher daemon. type ledflasher, domain; type ledflasher_exec, exec_type, file_type; -init_daemon_domain(ledflasher) +brillo_domain(ledflasher) allow_crash_reporter(ledflasher) - -unix_socket_connect(ledflasher, dbus_daemon, dbus_daemon) -dontaudit ledflasher kernel:system module_request; diff --git a/sepolicy/ledservice.te b/sepolicy/ledservice.te index a2deef6..2d3fbd7 100644 --- a/sepolicy/ledservice.te +++ b/sepolicy/ledservice.te @@ -2,10 +2,7 @@ type ledservice, domain; type ledservice_exec, exec_type, file_type; -init_daemon_domain(ledservice) +brillo_domain(ledservice) allow_crash_reporter(ledservice) -unix_socket_connect(ledservice, dbus_daemon, dbus_daemon) -dontaudit ledservice kernel:system module_request; - allow ledservice sysfs:file write; |