diff options
author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2023-02-24 18:13:12 +0000 |
---|---|---|
committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2023-02-24 18:13:12 +0000 |
commit | 277a225da48c36d9c05fe198692ef945d80f833d (patch) | |
tree | 63c904290f30be50375743bfdc5dca5eb56a1f7d /non_plat | |
parent | 83a9827c4b98248ef049e67c23827cdea9b39d31 (diff) | |
parent | 65a66499ccdd1a7963b5895aaf4c3564a51c8a08 (diff) | |
download | wembley-sepolicy-277a225da48c36d9c05fe198692ef945d80f833d.tar.gz |
Snap for 9652768 from 65a66499ccdd1a7963b5895aaf4c3564a51c8a08 to simpleperf-release
Change-Id: I59934cf8508949a87ba7c89115698240475b1387
Diffstat (limited to 'non_plat')
-rw-r--r-- | non_plat/file.te | 3 | ||||
-rw-r--r-- | non_plat/genfs_contexts | 2 | ||||
-rw-r--r-- | non_plat/kernel.te | 6 |
3 files changed, 1 insertions, 10 deletions
diff --git a/non_plat/file.te b/non_plat/file.te index 9699e92..abd910a 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -197,9 +197,6 @@ type adbd_data_file, file_type, data_file_type, core_data_file_type; #autokd data file type autokd_data_file, file_type, data_file_type; -#fuse -type fuseblk,sdcard_type,fs_type,mlstrustedobject; - # for mt-ramdump reset type proc_mrdump_rst, fs_type, proc_type; diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index b627077..a18259e 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -234,7 +234,7 @@ genfscon debugfs /smi_mon u:object_r:debugfs_smi_mon:s0 genfscon iso9660 / u:object_r:iso9660:s0 genfscon rawfs / u:object_r:rawfs:s0 -genfscon fuseblk / u:object_r:fuseblk:s0 + # 2019/08/24 genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0 diff --git a/non_plat/kernel.te b/non_plat/kernel.te index 15b2430..43bf6fd 100644 --- a/non_plat/kernel.te +++ b/non_plat/kernel.te @@ -47,12 +47,6 @@ allow kernel misc2_block_device:blk_file rw_file_perms; # Date : WK16.30 # Operation: SQC # Purpose: Allow sdcardfs workqueue to access lower file systems -allow kernel { fuseblk }:dir create_dir_perms; -allow kernel { fuseblk }:file create_file_perms; - -# Date : WK16.30 -# Operation: SQC -# Purpose: Allow sdcardfs workqueue to access lower file systems allow kernel {vfat mnt_media_rw_file}:dir create_dir_perms; allow kernel {vfat mnt_media_rw_file}:file create_file_perms; allow kernel kernel:key { write search setattr }; |