Skip to content
Snippets Groups Projects
Commit 29326eda authored by Stephen Smalley's avatar Stephen Smalley
Browse files

Drop domain write access to sysfs for the emulator.


3.4 goldfish kernel supports sysfs labeling so we no longer need this.

Change-Id: I77514a8f3102ac8be957c57d95e7de7d5901f69d
Signed-off-by: default avatarStephen Smalley <sds@tycho.nsa.gov>
parent 0f7641d8
No related branches found
No related tags found
No related merge requests found
......@@ -103,9 +103,8 @@ allow domain ion_device:chr_file rw_file_perms;
# For /sys/qemu_trace files in the emulator.
bool in_qemu false;
if (in_qemu) {
allow domain sysfs:file rw_file_perms;
}
allow domain sysfs_writable:file rw_file_perms;
}
# Read access to pseudo filesystems.
r_dir_file(domain, proc)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment