Skip to content
Snippets Groups Projects
  • Nick Kralevich's avatar
    1a022cbb
    storaged.te: Remove redundant permission. · 1a022cbb
    Nick Kralevich authored
    All SELinux domains are already granted the ability to read the
    filenames in /proc, so it's unnecessary to add it to storaged.te.
    
      $ grep "proc:dir r_dir_perms" public/domain.te
      allow domain proc:dir r_dir_perms;
    
    Remove redundant rule.
    
    Test: policy compiles.
    Change-Id: I8779cda19176f7eb914778f131bb5b14e5b14448
    1a022cbb
    History
    storaged.te: Remove redundant permission.
    Nick Kralevich authored
    All SELinux domains are already granted the ability to read the
    filenames in /proc, so it's unnecessary to add it to storaged.te.
    
      $ grep "proc:dir r_dir_perms" public/domain.te
      allow domain proc:dir r_dir_perms;
    
    Remove redundant rule.
    
    Test: policy compiles.
    Change-Id: I8779cda19176f7eb914778f131bb5b14e5b14448