On Nov 22, 2016 02:58, "peng fei" <[email protected]> wrote:
>
> R, S and T are type of files.
>
> The process a has domain A
> in A.te
> allow A S:file rw_perm;
> allow A T:file rw_perm;
>
> The process b has domain B
> in B.te
> allow B S:file rw_perm;
> allow B R:file rw_perm;
>
> Is this correct that domain A and domain B have the same permission to S ?

Yes
>
-------------------------------------------------------------------------------------------------------------
> The process a has domain A
> in A.te
> allow A S:file r_perm;
> allow A T:file rw_perm;
>
> The process b has domain B
> in B.te
> allow B S:file rw_perm;
> allow B R:file rw_perm;
> Is this correct that domain A is granted to read S and domain B is
granted to rw S ?
> Is this correct that different domain must has disjoint permission set?

There is no requirement. However sepolicy analyze will help you find
equivalent types.
>
>
>
> _______________________________________________
> Seandroid-list mailing list
> [email protected]
> To unsubscribe, send email to [email protected].
> To get help, send an email containing "help" to
[email protected].
_______________________________________________
Seandroid-list mailing list
[email protected]
To unsubscribe, send email to [email protected].
To get help, send an email containing "help" to 
[email protected].

Reply via email to