Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 8d7af382 authored by Jeffrey Vander Stoep's avatar Jeffrey Vander Stoep Committed by Android (Google) Code Review
Browse files

Merge "Remove world writable sysfs files" into stage-aosp-master

parents 62263d99 10c69455

target/board/generic/sepolicy/domain.te

+0 −3
Original line number Diff line number Diff line 
# For /sys/qemu_trace files in the emulator.

allow domain sysfs_writable:dir search;

allow domain sysfs_writable:file rw_file_perms;

allow domain qemu_device:chr_file rw_file_perms;



get_prop(domain, qemu_prop)

target/board/generic/sepolicy/file.te

+0 −1
Original line number Diff line number Diff line 
type qemud_socket, file_type;
 
type sysfs_writable, fs_type, sysfs_type, mlstrustedobject;

target/board/generic/sepolicy/file_contexts

+0 −1
Original line number Diff line number Diff line
@@ -15,7 +15,6 @@ 
/dev/ttyGF[0-9]*             u:object_r:serial_device:s0

/dev/ttyS2                   u:object_r:console_device:s0

/system/bin/qemud            u:object_r:qemud_exec:s0

/sys/qemu_trace(/.*)?        u:object_r:sysfs_writable:s0

/system/etc/init.goldfish.sh u:object_r:goldfish_setup_exec:s0

/system/vendor/bin/init.ranchu-core.sh u:object_r:goldfish_setup_exec:s0

/system/vendor/bin/init.ranchu-net.sh u:object_r:goldfish_setup_exec:s0