diff --git a/public/vold.te b/public/vold.te index 3ebb1d2fdf73ee2a8a3f05cb7044bf18f47860dd..fe3ab7199d0a4ef0a19251e9f14dc382f2e0a7fd 100644 --- a/public/vold.te +++ b/public/vold.te @@ -94,6 +94,9 @@ allow vold ion_device:chr_file r_file_perms; # Unmount and mount the fs. allow vold labeledfs:filesystem { mount unmount remount }; +# audit any attempts of vold to remount a filesystem, monitor in a few weeks +# then remove +auditallow vold labeledfs:filesystem { remount }; # Access /efs/userdata_footer. # XXX Split into a separate type?