diff --git a/drmserver.te b/drmserver.te index 428b3d3b9923ac0b9eb33a7b6247285ed657572d..ba7e62fc28f572a1cb96841a7fca07d9c9377400 100644 --- a/drmserver.te +++ b/drmserver.te @@ -48,6 +48,7 @@ allow drmserver radio_data_file:file { read getattr }; allow drmserver drmserver_service:service_manager add; # /oem access +allow drmserver oemfs:dir search; allow drmserver oemfs:file r_file_perms; # Audited locally. diff --git a/mediaserver.te b/mediaserver.te index dc94fc820ea798c475d097d143fd6fa921b5e96c..711f4df7e5f2c4dc4a626cf940a25df0bc0be089 100644 --- a/mediaserver.te +++ b/mediaserver.te @@ -81,6 +81,7 @@ allow mediaserver tee:unix_stream_socket connectto; allow mediaserver mediaserver_service:service_manager add; # /oem access +allow mediaserver oemfs:dir search; allow mediaserver oemfs:file r_file_perms; # Audited locally.