diff --git a/sepolicy/ohos_policy/multimodalinput/input/system/multimodalinput.te b/sepolicy/ohos_policy/multimodalinput/input/system/multimodalinput.te index 2209e2bbc8bf11e2a980dd3ab73065d2ae13c00c..170aa8e9c982f4c99793358f2306b886fa7e6e00 100644 --- a/sepolicy/ohos_policy/multimodalinput/input/system/multimodalinput.te +++ b/sepolicy/ohos_policy/multimodalinput/input/system/multimodalinput.te @@ -19,7 +19,7 @@ allow multimodalinput data_init_agent:file { open read append ioctl }; allow multimodalinput data_log:dir { search write add_name create }; allow multimodalinput data_log:file { create open read write ioctl }; allow multimodalinput data_multimodalinput:dir { add_name create getattr open read remove_name search watch write }; -allow multimodalinput data_multimodalinput:file { create open read rename unlink write }; +allow multimodalinput data_multimodalinput:file { create open read rename unlink write setattr getattr ioctl }; allow multimodalinput data_service_file:dir { search }; allow multimodalinput data_service_el1_file:dir { search }; allow multimodalinput data_service_el1_file:file { open read }; @@ -72,3 +72,4 @@ allow init data_multimodalinput:dir { create getattr open read relabelfrom relab allowxperm multimodalinput data_log:file ioctl { 0x5413 }; allowxperm multimodalinput dev_dri_file:chr_file ioctl { 0x641f }; allowxperm multimodalinput dev_input_file:chr_file ioctl { 0x4503 0x4560 0x4542 0x4548 0x456f 0x450a 0x4559 0x4568 0x455a 0x455b }; +allowxperm multimodalinput data_multimodalinput:file ioctl { 0x5413 };