From a00b74196e4ee945deddbfa5fa24f3c6728dc80f Mon Sep 17 00:00:00 2001 From: Steven Moreland <smoreland@google.com> Date: Wed, 20 Dec 2017 13:05:06 -0800 Subject: [PATCH] Remove sys/class/leds permissions from dumpstate. These are device specific. Bug: 70846424 Test: bugreport Change-Id: Ic22c972f1b09988a8eccf0823dd0d87fc0c0a1f7 --- public/dumpstate.te | 5 ----- 1 file changed, 5 deletions(-) diff --git a/public/dumpstate.te b/public/dumpstate.te index 6f1fa69c0..5dc6894ca 100644 --- a/public/dumpstate.te +++ b/public/dumpstate.te @@ -253,11 +253,6 @@ r_dir_file(dumpstate, sysfs) # Allow dumpstate to run top allow dumpstate proc_stat:file r_file_perms; -# Allow dumpstate to read backlight details -allow dumpstate sysfs_leds:lnk_file r_file_perms; -allow dumpstate sysfs_leds:file r_file_perms; -allow dumpstate sysfs_leds:dir search; - # Allow dumpstate to talk to installd over binder binder_call(dumpstate, installd); -- GitLab