diff --git a/domain.te b/domain.te index aaf2d0a04b3a580629cf30c735474ee1bb98ef78..c910c7069855f403d9c203399cff900e6273061a 100644 --- a/domain.te +++ b/domain.te @@ -99,6 +99,9 @@ allow domain system_file:lnk_file read; # libc references /data/misc/zoneinfo for timezone related information r_dir_file(domain, zoneinfo_data_file) +# Lots of processes access current CPU information +r_dir_file(domain, sysfs_devices_system_cpu) + # files under /data. allow domain system_data_file:dir { search getattr }; allow domain system_data_file:lnk_file read; diff --git a/domain_deprecated.te b/domain_deprecated.te index 5fbeb60cb2f8d40fb551b9903c2249efe3a8a142..269fe5bbdbdde9bc3d9e2090729ac3d061e3ad40 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -63,7 +63,6 @@ allow domain_deprecated ion_device:chr_file rw_file_perms; # Read access to pseudo filesystems. r_dir_file(domain_deprecated, proc) r_dir_file(domain_deprecated, sysfs) -r_dir_file(domain_deprecated, sysfs_devices_system_cpu) r_dir_file(domain_deprecated, inotify) r_dir_file(domain_deprecated, cgroup) r_dir_file(domain_deprecated, proc_net)