diff --git a/public/tombstoned.te b/public/tombstoned.te index 0e585b662c6b89b48ad3db1bd8da3adee05a14a3..9c75c976a5bd6299605183bc1dfc8323c385af46 100644 --- a/public/tombstoned.te +++ b/public/tombstoned.te @@ -11,12 +11,7 @@ allow tombstoned domain:file r_file_perms; allow tombstoned tombstone_data_file:dir rw_dir_perms; allow tombstoned tombstone_data_file:file { create_file_perms link }; -# TODO: Remove append / write permissions. They were temporarily -# granted due to a bug which appears to have been fixed. -allow tombstoned anr_data_file:file { append write }; -auditallow tombstoned anr_data_file:file { append write }; - # Changes for the new stack dumping mechanism. Each trace goes into a # separate file, and these files are managed by tombstoned. allow tombstoned anr_data_file:dir rw_dir_perms; -allow tombstoned anr_data_file:file { create getattr open link unlink }; +allow tombstoned anr_data_file:file { append create getattr open link unlink };