diff --git a/domain.te b/domain.te index ffd1704c7830c2a7e83170c5b010927304c3d220..fc7a0357d0d63f3417fdd017197541b5193c16c3 100644 --- a/domain.te +++ b/domain.te @@ -185,7 +185,7 @@ neverallow { } self:capability sys_ptrace; # Limit device node creation to these whitelisted domains. -neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -slideshow } self:capability mknod; +neverallow { domain -kernel -init -ueventd -watchdogd -healthd -vold -uncrypt -slideshow } self:capability mknod; # Limit raw I/O to these whitelisted domains. neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;