summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVishal Mahaveer2016-06-23 11:35:05 -0500
committerVishal Mahaveer2016-06-23 11:35:05 -0500
commit1ff27277f3bf42c81e2d3c398468fc2468d4471c (patch)
treef2b5e3a8209e9458beefea0faac9c45a4329b14d
parent8f26236a014b9c85a120842edc91f3d966c69ffb (diff)
downloaddevice-ti-jacinto6evm-1ff27277f3bf42c81e2d3c398468fc2468d4471c.tar.gz
device-ti-jacinto6evm-1ff27277f3bf42c81e2d3c398468fc2468d4471c.tar.xz
device-ti-jacinto6evm-1ff27277f3bf42c81e2d3c398468fc2468d4471c.zip
jacinto6evm: sepolicy: updates for configFS
selinux updates for configFS Change-Id: If9bfeef4ec8b2ef3293bbb2fedb777cb9839b3f4 Signed-off-by: Vishal Mahaveer <vishalm@ti.com>
-rw-r--r--sepolicy/file.te2
-rw-r--r--sepolicy/genfs_contexts1
-rw-r--r--sepolicy/init.te5
3 files changed, 8 insertions, 0 deletions
diff --git a/sepolicy/file.te b/sepolicy/file.te
new file mode 100644
index 0000000..2d8644d
--- /dev/null
+++ b/sepolicy/file.te
@@ -0,0 +1,2 @@
1# /config
2type configfs, fs_type;
diff --git a/sepolicy/genfs_contexts b/sepolicy/genfs_contexts
new file mode 100644
index 0000000..50c7cd7
--- /dev/null
+++ b/sepolicy/genfs_contexts
@@ -0,0 +1 @@
genfscon configfs / u:object_r:configfs:s0
diff --git a/sepolicy/init.te b/sepolicy/init.te
index 1c88dbc..b0822c6 100644
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -2,3 +2,8 @@
2allow init self:capability sys_module; 2allow init self:capability sys_module;
3#Create symlinks for storage 3#Create symlinks for storage
4allow init tmpfs:lnk_file create_file_perms; 4allow init tmpfs:lnk_file create_file_perms;
5
6# /config
7allow init configfs:dir create_dir_perms;
8allow init configfs:file w_file_perms;
9allow init configfs:lnk_file create;