diff options
| author | Alfred Piccioni <alpic@google.com> | 2023-01-24 13:37:52 +0100 |
|---|---|---|
| committer | Alfred Piccioni <alpic@google.com> | 2023-01-25 11:33:40 +0100 |
| commit | 4c8c9b0f358859673eb919cd43d61b34556eccd9 (patch) | |
| tree | 76a33bc13ff32d551ca04642ad72460a8790d2da | |
| parent | 98b7c7f259e6bb9d6138734c2e9d2c4dd1cf76d2 (diff) | |
| download | wembley-sepolicy-4c8c9b0f358859673eb919cd43d61b34556eccd9.tar.gz | |
Remove fuseblk.
Fuseblk will be added to the core Android SEPolicy, so we need to remove
these SEPolicies to avoid a conflict.
Test: No testing, changes will be re-added in the core Android
SEPolicies.
Bug: 254407246
Change-Id: Ieb3b2037830840cd7a4a3c6baa84a8005014d12f
Merged-In: Ieb3b2037830840cd7a4a3c6baa84a8005014d12f
| -rw-r--r-- | non_plat/file.te | 3 | ||||
| -rw-r--r-- | non_plat/genfs_contexts | 2 | ||||
| -rw-r--r-- | non_plat/kernel.te | 6 |
3 files changed, 1 insertions, 10 deletions
diff --git a/non_plat/file.te b/non_plat/file.te index 9699e92..abd910a 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -197,9 +197,6 @@ type adbd_data_file, file_type, data_file_type, core_data_file_type; #autokd data file type autokd_data_file, file_type, data_file_type; -#fuse -type fuseblk,sdcard_type,fs_type,mlstrustedobject; - # for mt-ramdump reset type proc_mrdump_rst, fs_type, proc_type; diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index b627077..a18259e 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -234,7 +234,7 @@ genfscon debugfs /smi_mon u:object_r:debugfs_smi_mon:s0 genfscon iso9660 / u:object_r:iso9660:s0 genfscon rawfs / u:object_r:rawfs:s0 -genfscon fuseblk / u:object_r:fuseblk:s0 + # 2019/08/24 genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0 diff --git a/non_plat/kernel.te b/non_plat/kernel.te index 15b2430..43bf6fd 100644 --- a/non_plat/kernel.te +++ b/non_plat/kernel.te @@ -47,12 +47,6 @@ allow kernel misc2_block_device:blk_file rw_file_perms; # Date : WK16.30 # Operation: SQC # Purpose: Allow sdcardfs workqueue to access lower file systems -allow kernel { fuseblk }:dir create_dir_perms; -allow kernel { fuseblk }:file create_file_perms; - -# Date : WK16.30 -# Operation: SQC -# Purpose: Allow sdcardfs workqueue to access lower file systems allow kernel {vfat mnt_media_rw_file}:dir create_dir_perms; allow kernel {vfat mnt_media_rw_file}:file create_file_perms; allow kernel kernel:key { write search setattr }; |