diff --git a/non_plat/dumpstate.te b/non_plat/dumpstate.te index 4e23ee0..573ec58 100644 --- a/non_plat/dumpstate.te +++ b/non_plat/dumpstate.te @@ -174,3 +174,6 @@ allow dumpstate sysfs_adsp:file r_file_perms; #Purpose: Allow dumpstate to read /sys/kernel/debug/smi_mon allow dumpstate debugfs_smi_mon:file r_file_perms; + +# MTEE Trusty +allow dumpstate mtee_trusty_file:file rw_file_perms; diff --git a/non_plat/file.te b/non_plat/file.te index a8db089..bec6021 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -385,3 +385,6 @@ type vcodec_file, file_type, data_file_type; # Date : 2019/08/24 type sysfs_sensor, fs_type, sysfs_type; + +#MTEE trusty +type mtee_trusty_file, fs_type, sysfs_type; diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index 118dd9e..6d18b6f 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -216,4 +216,7 @@ genfscon fuseblk / u:object_r:fuseblk:s0 # 2019/08/24 genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0 -genfscon sysfs /devices/virtual/sensor u:object_r:sysfs_sensor:s0 \ No newline at end of file +genfscon sysfs /devices/virtual/sensor u:object_r:sysfs_sensor:s0 + +# MTEE trusty +genfscon sysfs /devices/platform/trusty u:object_r:mtee_trusty_file:s0