Remove surfaceflinger access to sysfs.

Bug: 65643247
Test: SurfaceFlinger_test passes (except known failures) without selinux
denials
Change-Id: I6ce185f92e5ad64a172da7d7e12167d8da2ebed0
This commit is contained in:
Tri Vo 2017-10-02 14:16:29 -07:00
parent 2f6e66ff09
commit 54a2cac5a2

View file

@ -84,7 +84,6 @@ allow surfaceflinger window_service:service_manager find;
allow surfaceflinger self:capability sys_nice;
allow surfaceflinger proc_meminfo:file r_file_perms;
r_dir_file(surfaceflinger, cgroup)
r_dir_file(surfaceflinger, sysfs_type)
r_dir_file(surfaceflinger, system_file)
allow surfaceflinger tmpfs:dir r_dir_perms;
allow surfaceflinger system_server:fd use;