diff --git a/ueventd.te b/ueventd.te index d4c769f0f7d63efaa89c712afcccf4f677451dce..6a44367ec72cd8c3a633f33122befd95b28facf5 100644 --- a/ueventd.te +++ b/ueventd.te @@ -10,7 +10,7 @@ allow ueventd self:capability { chown mknod net_admin setgid fsetid sys_rawio da allow ueventd device:file create_file_perms; allow ueventd device:chr_file rw_file_perms; allow ueventd sysfs:file rw_file_perms; -allow ueventd sysfs_usb:file w_file_perms; +allow ueventd sysfs_usb:file rw_file_perms; allow ueventd sysfs_hwrandom:file w_file_perms; allow ueventd sysfs_zram_uevent:file w_file_perms; allow ueventd sysfs_type:{ file lnk_file } { relabelfrom relabelto setattr getattr }; diff --git a/vold.te b/vold.te index 81ed18b55b71e52e3b2de796d51a5e67a0d3bfe2..75b6f36660954f759629a1a5fcbd91c7872b1b15 100644 --- a/vold.te +++ b/vold.te @@ -90,9 +90,6 @@ allow vold self:capability { sys_ptrace kill }; # XXX Label sysfs files with a specific type? allow vold sysfs:file rw_file_perms; -# TODO: added to match above sysfs rule. Remove me? -allow vold sysfs_usb:file w_file_perms; - allow vold kmsg_device:chr_file rw_file_perms; # Run fsck in the fsck domain.