diff --git a/domain_deprecated.te b/domain_deprecated.te index e5bfb1c883933e04eccbb148178e1dc79e658dce..00fb516a307ef493e63b08453eb587c52f54d29d 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -54,7 +54,7 @@ allow domain_deprecated ion_device:chr_file rw_file_perms; # Read access to pseudo filesystems. r_dir_file(domain_deprecated, proc) -r_dir_file(domain_deprecated, sysfs) +r_dir_file({ domain_deprecated -isolated_app }, sysfs) r_dir_file(domain_deprecated, inotify) r_dir_file(domain_deprecated, cgroup) allow domain_deprecated proc_meminfo:file r_file_perms;