Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 55d306b8 authored by Jonathan Klee's avatar Jonathan Klee
Browse files

Add addon.te

parent 78abd63b

common/private/addon.te

0 → 100644
+8 −0
Original line number Diff line number Diff line 
type addon_dir_t;

typeattribute addon_dir_t file_type, system_file_type;



neverallow untrusted_app addon_dir_t:dir r_dir_perms;

neverallow untrusted_app addon_dir_t:file r_file_perms;



allow shell addon_dir_t:dir r_dir_perms;

allow shell addon_dir_t:file r_file_perms;

common/private/file_contexts

+4 −0
Original line number Diff line number Diff line
@@ -18,3 +18,7 @@ 


# Bash

/(system_ext|system/system_ext)/bin/bash          u:object_r:shell_exec:s0



# /system/addon.d

/system/addon.d(/.*)?     u:object_r:addon_dir_t:s0

common/private/untrusted_app.te

+3 −0
Original line number Diff line number Diff line 
allow untrusted_app_all lineage_profile_service:service_manager find;



neverallow untrusted_app addon_dir_t:dir r_dir_perms;

neverallow untrusted_app addon_dir_t:file r_file_perms;