diff --git a/code/libs/sys-secpolicy.lua b/code/libs/sys-secpolicy.lua index fc2005c..10414d6 100644 --- a/code/libs/sys-secpolicy.lua +++ b/code/libs/sys-secpolicy.lua @@ -22,7 +22,7 @@ local function actualPolicy(pkg, pid, perm, matchesSvc) return "allow" end -- These signals are harmless, though they identify HW (as does everything in OC...) - if perm == "s.h.component_added" or perm == "s.h.component_removed" then + if perm == "s.h.component_added" or perm == "s.h.component_removed" or perm == "s.h.tablet_use" or perm == "c.tablet" then return "allow" end if matchesSvc("r.", pkg, perm) then diff --git a/repository/docs/kn-perms b/repository/docs/kn-perms index e64b4d5..b999e95 100644 --- a/repository/docs/kn-perms +++ b/repository/docs/kn-perms @@ -53,9 +53,9 @@ Here, "*" means that everything after program to start up. "k.computer": The "computer" table, - with wrapMeta applied, - pullSignal removed, - and also pushSignal. + with wrapMeta applied. +The security check may be aliased to + the "k.root" permission in future. "k.kill": function (pid) to kill any process on the system.