Skip to content
Snippets Groups Projects
Commit d0fe17ca authored by Tri Vo's avatar Tri Vo
Browse files

init: restrict setattr perms to /proc.

Bug: 65643247
Test: device boots without denials from init to proc_*
Change-Id: I44729e791366cdedec27603558b2e929fa414168
parent 80966397
No related branches found
No related tags found
No related merge requests found
......@@ -227,7 +227,7 @@ allow init debugfs_wifi_tracing:file w_file_perms;
allow init {
fs_type
-contextmount_type
-proc
-proc_type
-sdcard_type
-sysfs_type
-rootfs
......@@ -311,6 +311,17 @@ allow init {
proc_security
}:file rw_file_perms;
# init chmod/chown access to /proc files.
allow init {
proc_cmdline
proc_kmsg
proc_net
proc_qtaguid_stat
proc_sysrq
proc_qtaguid_ctrl
proc_vmallocinfo
}:file setattr;
# init access to /sys files.
allow init {
sysfs_android_usb
......
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment