When you create the linux file node, such as “dev/nfccard0”, you must add the selinux policy for it, or the application can not get the permit to access. this is an example for the system_server to accecc the dev/nfccard0 file node. we c
When you create the linux file node, such as “dev/nfccard0”, you must add the selinux policy for it, or the application can not get the permit to access.
this is an example for the system_server to accecc the dev/nfccard0 file node.
we can do the following three things to mak the system work smoothly.
1 define the file type
in the file.te add the below line
type nfccard_device,dev_type
2 define the file context
in the file_context.te add the below line
/dev/nfccard0 u:object_r:nfccard_devicd:s0
3 allow the system_server to access it.
Allow system_server nfccard_device:chr_file rw_file_perms
Or
Allow system_server nfccard_device:chr_file {read write open getattr ioctl}
there are many file type , {socket, binder, property,etc}, we must do carefully to avoid influence the system.