diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 32f7b32a..0ddf90ff 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -10,11 +10,11 @@ allow tee block_device:dir { getattr search }; allow tee ssd_block_device:blk_file rw_file_perms; allow tee sg_device:chr_file { rw_file_perms setattr }; -r_dir_file(tee, persist_data_file) - -allow tee persist_file:dir search; +allow tee persist_file:dir r_dir_perms; allow tee persist_drm_file:dir create_dir_perms; allow tee persist_drm_file:file create_file_perms; +allow tee persist_data_file:dir create_dir_perms; +allow tee persist_data_file:file create_file_perms; allow tee system_data_file:dir r_dir_perms;