diff options
| author | ontherunvaro <alvaro.brv@gmail.com> | 2017-02-15 20:23:40 +0100 |
|---|---|---|
| committer | davidevinavil <davidevinavil@gmail.com> | 2017-04-07 13:18:13 +0200 |
| commit | 813f91814057873ec51369fbc0b4c2ad56e67c95 (patch) | |
| tree | 546babbb818569c6f9d09564500da7fedb15b804 | |
| parent | e0a248178c9fa05733c95ab61d42cd3c2bf799e9 (diff) | |
sepolicy: Address some denials
| -rw-r--r-- | sepolicy/priv_app.te | 4 | ||||
| -rw-r--r-- | sepolicy/shell.te | 1 |
2 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/priv_app.te b/sepolicy/priv_app.te new file mode 100644 index 0000000..c2dfcc0 --- /dev/null +++ b/sepolicy/priv_app.te @@ -0,0 +1,4 @@ +allow priv_app device:dir r_dir_perms; +allow priv_app rfs_system_file:dir r_dir_perms; + + diff --git a/sepolicy/shell.te b/sepolicy/shell.te index c431c5a..7fea463 100644 --- a/sepolicy/shell.te +++ b/sepolicy/shell.te @@ -1,3 +1,4 @@ allow shell rfs_system_file:dir getattr; +allow shell proc_stat:file read; allow shell su_exec:file getattr; |