diff options
Diffstat (limited to 'sepolicy/untrusted_app.te')
| -rw-r--r-- | sepolicy/untrusted_app.te | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/untrusted_app.te b/sepolicy/untrusted_app.te new file mode 100644 index 0000000..5f21d49 --- /dev/null +++ b/sepolicy/untrusted_app.te @@ -0,0 +1,4 @@ +allow untrusted_app asus_tee_device:chr_file rw_file_perms; +allow untrusted_app system_file:file execmod; +allow untrusted_app cpuinfo_file:file { mounton }; +allow untrusted_app cpuinfo_file:file r_file_perms; |