From b1affc9095cb1a02cefac38dec2b6250b748656e Mon Sep 17 00:00:00 2001 From: Tri Vo <trong@google.com> Date: Sat, 16 Sep 2017 14:38:19 -0700 Subject: [PATCH] Remove bootstat access to proc label. Bug: 65643247 Test: device boots without denials from bootstat to proc. Change-Id: Ie31a0488239dbb1614fbcce07540d23afa805b0e --- public/bootstat.te | 3 --- 1 file changed, 3 deletions(-) diff --git a/public/bootstat.te b/public/bootstat.te index a55cfe6a4..7ba023815 100644 --- a/public/bootstat.te +++ b/public/bootstat.te @@ -8,9 +8,6 @@ read_runtime_log_tags(bootstat) allow bootstat bootstat_data_file:dir rw_dir_perms; allow bootstat bootstat_data_file:file create_file_perms; -# Read access to pseudo filesystems (for /proc/uptime). -r_dir_file(bootstat, proc) - # Collect metrics on boot time created by init get_prop(bootstat, boottime_prop) -- GitLab