summaryrefslogtreecommitdiffstats
path: root/selinux/untrusted_app.te
diff options
context:
space:
mode:
Diffstat (limited to 'selinux/untrusted_app.te')
-rw-r--r--selinux/untrusted_app.te5
1 files changed, 5 insertions, 0 deletions
diff --git a/selinux/untrusted_app.te b/selinux/untrusted_app.te
new file mode 100644
index 0000000..f9c5bde
--- /dev/null
+++ b/selinux/untrusted_app.te
@@ -0,0 +1,5 @@
+allow untrusted_app storage_stub_file:dir getattr;
+allow untrusted_app log_device:chr_file { read write };
+allow untrusted_app self:udp_socket ioctl;
+allow untrusted_app app_data_file:file create_file_perms;
+allow untrusted_app app_data_file:dir create_dir_perms;