tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

mediaserver: remove access to 'sysfs' type.

Browse source 
Bug: 65643247
Test: cts-tradefed run cts-dev -m \
CtsMediaTestCases --compatibility:module-arg \
CtsMediaTestCases:include-annotation:\
android.platform.test.annotations.RequiresDevice
No denials from mediaserver domain to sysfs type are observed.
Change-Id: Icb5c12f04af213452d82e226993fe13085c5c33f
This commit is contained in:
Tri Vo 2017-11-16 17:17:15 -08:00
parent 13c69b891e
commit 2ea12cd345
2 changed files with 0 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/domain.te
View file

@ -40,7 +40,6 @@ full_treble_only(`
-dumpstate
-healthd
-init
-mediaserver
-priv_app
-storaged
-system_app

3
public/mediaserver.te
View file

@ -39,9 +39,6 @@ allow mediaserver video_device:chr_file rw_file_perms;
set_prop(mediaserver, audio_prop)
# XXX Label with a specific type?
allow mediaserver sysfs:file r_file_perms;
# Read resources from open apk files passed over Binder.
allow mediaserver apk_data_file:file { read getattr };
allow mediaserver asec_apk_file:file { read getattr };