Skip to content
Snippets Groups Projects
Commit 1a022cbb authored by Nick Kralevich's avatar Nick Kralevich
Browse files

storaged.te: Remove redundant permission.

All SELinux domains are already granted the ability to read the
filenames in /proc, so it's unnecessary to add it to storaged.te.

  $ grep "proc:dir r_dir_perms" public/domain.te
  allow domain proc:dir r_dir_perms;

Remove redundant rule.

Test: policy compiles.
Change-Id: I8779cda19176f7eb914778f131bb5b14e5b14448
parent 11058879
No related branches found
No related tags found
No related merge requests found
......@@ -8,7 +8,6 @@ init_daemon_domain(storaged)
allow storaged kmsg_device:chr_file { write append };
# Read access to pseudo filesystems
allow storaged proc:dir r_dir_perms;
r_dir_file(storaged, sysfs_type)
r_dir_file(storaged, proc_net)
r_dir_file(storaged, domain)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment