diff --git a/private/domain_deprecated.te b/private/domain_deprecated.te index 19358dee65000f4ad16252b814d14e252ff9f484..96737ab1fd20049b9f195a89c3e16493713cc988 100644 --- a/private/domain_deprecated.te +++ b/private/domain_deprecated.te @@ -1,21 +1,5 @@ # rules removed from the domain attribute -# Search /storage/emulated tmpfs mount. -allow { domain_deprecated -installd } tmpfs:dir r_dir_perms; -userdebug_or_eng(` -auditallow { - domain_deprecated - -appdomain - -installd - -recovery - -sdcardd - -surfaceflinger - -system_server - -vold - -zygote -} tmpfs:dir r_dir_perms; -') - # Root fs. allow domain_deprecated rootfs:dir r_dir_perms; allow domain_deprecated rootfs:file r_file_perms; diff --git a/public/dumpstate.te b/public/dumpstate.te index 9bc1ce5af57bbe38d2299ac5a2d51f068cef8508..592532f2531885b253c21e936afdde0f076e4161 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -84,7 +84,7 @@ allow dumpstate sysfs_usb:file w_file_perms; allow dumpstate qtaguid_proc:file r_file_perms; allow dumpstate debugfs:file r_file_perms; # df for /storage/emulated needs search -allow dumpstate { storage_file block_device }:dir { search getattr }; +allow dumpstate { block_device storage_file tmpfs }:dir { search getattr }; allow dumpstate fuse_device:chr_file getattr; allow dumpstate { dm_device cache_block_device }:blk_file getattr;