From d57eeaaa56e4cf27f03835f2f3fd525b59438edd Mon Sep 17 00:00:00 2001
From: Christian Hoffmann <[email protected]>
Date: Wed, 4 May 2022 11:00:36 +0200
Subject: [PATCH] amlogic: Sepolicy for tee firmware loader

Change-Id: I1d47dc65fb5ac18824272b951b39e37f4a888410
---
 sepolicy/vendor/file.te         | 2 --
 sepolicy/vendor/tee_firmload.te | 6 ++++++
 2 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 sepolicy/vendor/tee_firmload.te

diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te
index 3c10e3f..e2ac09a 100644
--- a/sepolicy/vendor/file.te
+++ b/sepolicy/vendor/file.te
@@ -16,6 +16,4 @@ type sysfs_mpgpu_cmd, fs_type, sysfs_type;
 type sysfs_wifi, fs_type, sysfs_type;
 type sysfs_xbmc, fs_type, sysfs_type;

-type tee_firmload_exec, exec_type, vendor_file_type, file_type;
-
 type vendor_mediadrm_vendor_data_file, file_type, data_file_type;
diff --git a/sepolicy/vendor/tee_firmload.te b/sepolicy/vendor/tee_firmload.te
new file mode 100644
index 0000000..1a1cb6d
--- /dev/null
+++ b/sepolicy/vendor/tee_firmload.te
@@ -0,0 +1,6 @@
+type tee_firmload, domain;
+type tee_firmload_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(tee_firmload)
+
+allow tee_firmload tee_device:chr_file rw_file_perms;
--
2.34.1