Merge "update_verifier: neverallow access to 'sysfs' label."

aca97bcb · Tri Vo · Gerrit Code Review · 07195bb6 · 7dd4d906 · aca97bcb
Commit aca97bcb authored 7 years ago by Tri Vo Committed by Gerrit Code Review 7 years ago
--- a/private/domain.te
+++ b/private/domain.te
@@ -45,7 +45,6 @@ full_treble_only(`
    -storaged
    -system_app
    -ueventd
-    -update_verifier
    -vold
    -vendor_init
  } sysfs:file no_rw_file_perms;