diff --git a/app.te b/app.te index 8bc138d6302b499715a83a41d9d582ef2f28e1b2..b89d4e15c975b412b48e1e25e6518e36b8bbf043 100644 --- a/app.te +++ b/app.te @@ -229,10 +229,6 @@ allow appdomain runas_exec:file getattr; selinux_check_access(appdomain) selinux_check_context(appdomain) -# appdomain should not be accessing information on /sys -auditallow { appdomain userdebug_or_eng(`-su') } sysfs:dir { open getattr read ioctl }; -auditallow { appdomain userdebug_or_eng(`-su') } sysfs:file r_file_perms; - # Apps receive an open tun fd from the framework for # device traffic. Do not allow untrusted app to directly open tun_device allow { appdomain -isolated_app } tun_device:chr_file { read write getattr ioctl append };