Skip to content
Snippets Groups Projects
  • Jeff Vander Stoep's avatar
    275f6dd5
    domain_deprecated: remove sysfs rules · 275f6dd5
    Jeff Vander Stoep authored
    Clean up the remaining granted permissions in domain_deprecated.
    
    avc: granted { read open } for comm="uncrypt"
    path="/sys/firmware/devicetree/base/firmware/android/fstab/compatible"
    dev="sysfs" ino=17591 scontext=u:r:uncrypt:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    avc: granted { getattr } for comm="uncrypt"
    path="/sys/firmware/devicetree/base/firmware/android/compatible"
    dev="sysfs" ino=17583 scontext=u:r:uncrypt:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    
    vc: granted { read open } for comm="update_engine"
    path="/sys/firmware/devicetree/base/firmware/android/fstab" dev="sysfs"
    ino=17258 scontext=u:r:update_engine:s0 tcontext=u:object_r:sysfs:s0
    tclass=dir
    avc: granted { getattr } for comm="update_engine"
    path="/sys/firmware/devicetree/base/firmware/android/fstab/compatible"
    dev="sysfs" ino=17259 scontext=u:r:update_engine:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    
    Bug: 28760354
    Test: build
    Change-Id: Id318ce84894c1001361923f5205de093a15c1e6a
    275f6dd5
    History
    domain_deprecated: remove sysfs rules
    Jeff Vander Stoep authored
    Clean up the remaining granted permissions in domain_deprecated.
    
    avc: granted { read open } for comm="uncrypt"
    path="/sys/firmware/devicetree/base/firmware/android/fstab/compatible"
    dev="sysfs" ino=17591 scontext=u:r:uncrypt:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    avc: granted { getattr } for comm="uncrypt"
    path="/sys/firmware/devicetree/base/firmware/android/compatible"
    dev="sysfs" ino=17583 scontext=u:r:uncrypt:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    
    vc: granted { read open } for comm="update_engine"
    path="/sys/firmware/devicetree/base/firmware/android/fstab" dev="sysfs"
    ino=17258 scontext=u:r:update_engine:s0 tcontext=u:object_r:sysfs:s0
    tclass=dir
    avc: granted { getattr } for comm="update_engine"
    path="/sys/firmware/devicetree/base/firmware/android/fstab/compatible"
    dev="sysfs" ino=17259 scontext=u:r:update_engine:s0
    tcontext=u:object_r:sysfs:s0 tclass=file
    
    Bug: 28760354
    Test: build
    Change-Id: Id318ce84894c1001361923f5205de093a15c1e6a