diff --git a/public/domain.te b/public/domain.te index 6f603a6e7b13b48cf552151159387d89ec011ee3..c6fc9f831682c656d51b2fdc0c5c259e804bcbdf 100644 --- a/public/domain.te +++ b/public/domain.te @@ -1423,7 +1423,5 @@ full_treble_only(` -incidentd # TODO(b/110890430): remove this exception -perfprofd - # TODO(b/110891415, b/65643247): remove these exceptions - -vold } sysfs_batteryinfo:file { open read }; ') diff --git a/public/vold.te b/public/vold.te index 06deefce37d9592f889311b03f87292b06072120..481f48c92ab049e633725e0712466e0f7e045564 100644 --- a/public/vold.te +++ b/public/vold.te @@ -13,7 +13,7 @@ userdebug_or_eng(` auditallow vold proc_net_type:{ dir file lnk_file } { getattr open read }; ') -r_dir_file(vold, sysfs_type) +r_dir_file(vold, { sysfs_type -sysfs_batteryinfo }) # XXX Label sysfs files with a specific type? allow vold sysfs:file w_file_perms; # writing to /sys/*/uevent during coldboot. allow vold sysfs_dm:file w_file_perms;