From 403149cf5c557d3227a45993370a27963738309f Mon Sep 17 00:00:00 2001
From: Chin-Ting Kuo <chin-ting.kuo@mediatek.com>
Date: Sat, 18 Jan 2020 10:07:22 +0800
Subject: [PATCH] [ALPS04098787] kernel_module: allow vendor_init kernel:key
 search

For kernel module verification support, allow vendor domain to
search kernel keyring.

MTK-Commit-Id: c25aec3cd1af3ce66f252755acf5c72f94de4006

Change-Id: Ia51e0aae1f94c536c03932e4999e0b9324e9d7f3
CR-Id: ALPS04098787
Feature: Secure Boot
---
 non_plat/vendor_init.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/non_plat/vendor_init.te b/non_plat/vendor_init.te
index 52793c6..78c9707 100644
--- a/non_plat/vendor_init.te
+++ b/non_plat/vendor_init.te
@@ -56,3 +56,6 @@ set_prop(vendor_init, mtk_appresolutiontuner_prop)
 
 # fullscreen switch
 set_prop(vendor_init, mtk_fullscreenswitch_prop)
+
+# for kernel module verification support, allow vendor domain to search kernel keyring
+allow vendor_init kernel:key search;
\ No newline at end of file