commit 3978d3758f61cc0bf05d3c0f324a3e170f3f91c5
author Mekala Natarajan <mekalan@codeaurora.org> Thu Oct 08 21:59:23 2015 -0700
committer Ed Tam <etam@google.com> Thu Oct 08 22:42:43 2015 -0700
tree c3e96ac0d7e8969dabc8c2a7dc6650c4937b9510
parent f27125bc1198586b8a19ef8d8436bd1c66107e86

sepolicy: allow tee to create persist_data_file dir

avc: denied { write } for name="data" dev="mmcblk0p32" ino=86 scontext=u:r:tee:s0 tcontext=u:object_r:persist_data_file:s0 tclass=dir permissive=0

BUG=23817620

Change-Id: I517811fc8f07340e7715b4e5ab9906c61f0b961d

sepolicy/tee.te

diff --git a/sepolicy/tee.te b/sepolicy/tee.te
index edbdf26..0c544b6 100644
--- a/sepolicy/tee.te
+++ b/sepolicy/tee.te
@@ -17,8 +17,8 @@
 allow tee time:unix_stream_socket connectto;
 
 allow tee persist_file:dir r_dir_perms;
-allow tee persist_data_file:dir r_dir_perms;
-allow tee persist_data_file:file r_file_perms;
+allow tee persist_data_file:dir create_dir_perms;
+allow tee persist_data_file:file create_file_perms;
 allow tee persist_drm_file:dir rw_dir_perms;
 allow tee persist_drm_file:file create_file_perms;