diff --git a/private/storaged.te b/private/storaged.te index ff5390a1dcecc28a202002dcefddd0b609d3b7cc..0916adf9530b91f3f0ec0e561d9b6fb20d7c03ca 100644 --- a/private/storaged.te +++ b/private/storaged.te @@ -5,10 +5,6 @@ type storaged_exec, exec_type, file_type; init_daemon_domain(storaged) # Read access to pseudo filesystems -r_dir_file(storaged, proc_net_type) -userdebug_or_eng(` - auditallow storaged proc_net_type:{ dir file lnk_file } { getattr open read }; -') r_dir_file(storaged, domain) # Read /proc/uid_io/stats diff --git a/private/zygote.te b/private/zygote.te index 281097643607ef22e04ada66cb0c96617fec7bff..ac1ef008788618420a842af113199493534b9790 100644 --- a/private/zygote.te +++ b/private/zygote.te @@ -92,12 +92,6 @@ allow zygote storage_file:dir { search mounton }; # Handle --invoke-with command when launching Zygote with a wrapper command. allow zygote zygote_exec:file rx_file_perms; -# Read access to pseudo filesystems. -r_dir_file(zygote, proc_net_type) -userdebug_or_eng(` - auditallow zygote proc_net_type:{ dir file lnk_file } { getattr open read }; -') - # Root fs. r_dir_file(zygote, rootfs) diff --git a/public/logd.te b/public/logd.te index 23318b0f932cdd6676b7565d1e569e8d327730f1..2ef257f38468e518f0b7e8edbdb05ef29974b116 100644 --- a/public/logd.te +++ b/public/logd.te @@ -6,10 +6,6 @@ type logd_exec, exec_type, file_type; r_dir_file(logd, cgroup) r_dir_file(logd, proc_kmsg) r_dir_file(logd, proc_meminfo) -r_dir_file(logd, proc_net_type) -userdebug_or_eng(` - auditallow logd proc_net_type:{ dir file lnk_file } { getattr open read }; -') allow logd self:global_capability_class_set { setuid setgid setpcap sys_nice audit_control }; allow logd self:global_capability2_class_set syslog;