Skip to content
Snippets Groups Projects
Commit 3e5bb807 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by Jeffrey Vander Stoep
Browse files

domain_deprecated: remove access to /proc/meminfo

Logs indicate that all processes that require access already have it.

Bug: 28760354
Test: build
Merged-In: I3dfa16bf4fba7f653c5f8525e8c565e9e24334a8
Change-Id: I3dfa16bf4fba7f653c5f8525e8c565e9e24334a8
parent 90ae4f6b
No related branches found
No related tags found
No related merge requests found
...@@ -154,7 +154,6 @@ auditallow { ...@@ -154,7 +154,6 @@ auditallow {
r_dir_file(domain_deprecated, proc) r_dir_file(domain_deprecated, proc)
r_dir_file(domain_deprecated, sysfs) r_dir_file(domain_deprecated, sysfs)
r_dir_file(domain_deprecated, cgroup) r_dir_file(domain_deprecated, cgroup)
allow domain_deprecated proc_meminfo:file r_file_perms;
userdebug_or_eng(` userdebug_or_eng(`
auditallow { auditallow {
...@@ -245,11 +244,4 @@ auditallow { ...@@ -245,11 +244,4 @@ auditallow {
-system_server -system_server
-zygote -zygote
} cgroup:{ file lnk_file } r_file_perms; } cgroup:{ file lnk_file } r_file_perms;
auditallow {
domain_deprecated
-appdomain
-surfaceflinger
-system_server
-vold
} proc_meminfo:file r_file_perms;
') ')
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment