Merge "Allow tee to access mnt_vendor_file" am: 435c1e8e7d am: ab07ab083b am: d787fc54a9 am: 55f1b00891
Original change: https://android-review.googlesource.com/c/device/google/redbull-sepolicy/+/1884509
Change-Id: I3bb5ce75ea23a77483115f301db09648421e7a9e
diff --git a/vendor/qcom/common/tee.te b/vendor/qcom/common/tee.te
index 05a9c29..1aac029 100644
--- a/vendor/qcom/common/tee.te
+++ b/vendor/qcom/common/tee.te
@@ -11,12 +11,15 @@
allow tee ssd_block_device:blk_file rw_file_perms;
allow tee sg_device:chr_file { rw_file_perms setattr };
-allow tee mnt_vendor_file:dir search;
-allow tee persist_file:dir search;
+allow tee mnt_vendor_file:dir r_dir_perms;
+allow tee persist_file:dir r_dir_perms;
allow tee persist_file:lnk_file read;
allow tee persist_drm_file:dir create_dir_perms;
allow tee persist_drm_file:file create_file_perms;
+# b/198130336
+dontaudit tee tmpfs:dir read;
+
wakelock_use(tee);
hwbinder_use(tee)
