diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index 0db190d..34ce0dd 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -21,3 +21,6 @@ type sysfs_tpd, fs_type, sysfs_type; type sysfs_tri_state_key, sysfs_type, fs_type; type sysfs_vl53l1, fs_type, sysfs_type; type vendor_sysfs_video_call_on, fs_type, sysfs_type; + +# Data files +type per_boot_file, file_type, data_file_type, core_data_file_type; diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index a20222f..f81f7aa 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -26,6 +26,7 @@ # Data files /data/reserve-lib(/.*)? u:object_r:apk_data_file:s0 +/data/per_boot(/.*)? u:object_r:per_boot_file:s0 # Devices diff --git a/sepolicy/vendor/kernel.te b/sepolicy/vendor/kernel.te index 03ad952..bf4aeb1 100644 --- a/sepolicy/vendor/kernel.te +++ b/sepolicy/vendor/kernel.te @@ -1,2 +1,3 @@ allow kernel param_block_device:dir search; allow kernel param_block_device:blk_file rw_file_perms; +allow kernel per_boot_file:file r_file_perms;