diff --git a/domain_deprecated.te b/domain_deprecated.te index 8b048795557b9d1e74067c9c51f11f2c9957a0b7..22bac861867adfcd9a1a37923479c5d1c28c1077 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -53,7 +53,7 @@ allow domain_deprecated ion_device:chr_file rw_file_perms; # Read access to pseudo filesystems. r_dir_file(domain_deprecated, proc) -r_dir_file(domain_deprecated, sysfs) +r_dir_file({ domain_deprecated -isolated_app }, sysfs) r_dir_file(domain_deprecated, inotify) r_dir_file(domain_deprecated, cgroup) allow domain_deprecated proc_meminfo:file r_file_perms;