JingMatrixandGitHub
68b660dfe1
Allow `keystore` to access the `file` class for `adb_data_file` and `shell_data_file` contexts. The target contexts correspond to the following locations: - `adb_data_file`: The library path `/data/adb/modules/tricky_store/libTEESimulator.so`, used for FD transfer. - `shell_data_file`: The fallback mechanism for loading the library by staging it in `/data/local/tmp`. Note: The rule for the `dir` class (directory search) has been removed because the supporting audit logs were lost. The remaining file access logs were observed on a MEIZU 21 Note.
3 lines
90 B
Plaintext
3 lines
90 B
Plaintext
allow keystore {adb_data_file shell_data_file} file *
|
|
allow crash_dump keystore process *
|