From e05487acc37875cd2f9e1648063ec8d6f9eade89 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Sat, 25 Apr 2015 15:54:11 -0700
Subject: [PATCH] init.te: Don't allow mounting on top of /proc

Don't allow init to mount on top of /proc. See
https://android-review.googlesource.com/148295 for details.

Change-Id: I65f66b39f3a5bfb72facb9f716f4537ac2237af1
---
 init.te | 2 --
 1 file changed, 2 deletions(-)

diff --git a/init.te b/init.te
index 9f68bb85d..9f624ba77 100644
--- a/init.te
+++ b/init.te
@@ -45,8 +45,6 @@ allow init self:capability sys_admin;
 allow init rootfs:dir create_dir_perms;
 allow init rootfs:dir mounton;
 
-allow init proc:dir mounton;
-
 # Mount on /dev/usb-ffs/adb.
 allow init device:dir mounton;
 
-- 
GitLab