From d7ae84aec0fd3367d6b116ae9cd93a35e01694ee Mon Sep 17 00:00:00 2001 From: Tri Vo <trong@google.com> Date: Tue, 19 Sep 2017 10:55:49 -0700 Subject: [PATCH] Remove bootanim access to sysfs and cgroup label. Bug: 65643247 Test: device boots without denials from bootanim to sysfs and cgroup. Change-Id: Icf8c45906cb83e1b0a60737d67ae584b9d1b34aa --- public/bootanim.te | 2 -- 1 file changed, 2 deletions(-) diff --git a/public/bootanim.te b/public/bootanim.te index 9ca6be052..29e58c72f 100644 --- a/public/bootanim.te +++ b/public/bootanim.te @@ -32,8 +32,6 @@ allow bootanim hal_graphics_composer:fd use; # Read access to pseudo filesystems. allow bootanim proc_meminfo:file r_file_perms; -r_dir_file(bootanim, sysfs) -r_dir_file(bootanim, cgroup) # System file accesses. allow bootanim system_file:dir r_dir_perms; -- GitLab