diff options
| author | Alfred Piccioni <alpic@google.com> | 2023-01-25 16:29:06 +0000 |
|---|---|---|
| committer | Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> | 2023-01-25 16:29:06 +0000 |
| commit | 9ffc0b11eaad52261049988fe5df456924d2f09c (patch) | |
| tree | 76a33bc13ff32d551ca04642ad72460a8790d2da | |
| parent | 36dda563b575fc41d9fd68fbf0c5d978173089e5 (diff) | |
| parent | 4c8c9b0f358859673eb919cd43d61b34556eccd9 (diff) | |
| download | wembley-sepolicy-9ffc0b11eaad52261049988fe5df456924d2f09c.tar.gz | |
Remove fuseblk. am: 4c8c9b0f35
Original change: https://android-review.googlesource.com/c/device/mediatek/wembley-sepolicy/+/2399764
Change-Id: I17a868c304ccb5cd4766382b688c8285ea564667
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
| -rw-r--r-- | non_plat/file.te | 3 | ||||
| -rw-r--r-- | non_plat/genfs_contexts | 2 | ||||
| -rw-r--r-- | non_plat/kernel.te | 6 |
3 files changed, 1 insertions, 10 deletions
diff --git a/non_plat/file.te b/non_plat/file.te index 9699e92..abd910a 100644 --- a/non_plat/file.te +++ b/non_plat/file.te @@ -197,9 +197,6 @@ type adbd_data_file, file_type, data_file_type, core_data_file_type; #autokd data file type autokd_data_file, file_type, data_file_type; -#fuse -type fuseblk,sdcard_type,fs_type,mlstrustedobject; - # for mt-ramdump reset type proc_mrdump_rst, fs_type, proc_type; diff --git a/non_plat/genfs_contexts b/non_plat/genfs_contexts index b627077..a18259e 100644 --- a/non_plat/genfs_contexts +++ b/non_plat/genfs_contexts @@ -234,7 +234,7 @@ genfscon debugfs /smi_mon u:object_r:debugfs_smi_mon:s0 genfscon iso9660 / u:object_r:iso9660:s0 genfscon rawfs / u:object_r:rawfs:s0 -genfscon fuseblk / u:object_r:fuseblk:s0 + # 2019/08/24 genfscon sysfs /class/sensor u:object_r:sysfs_sensor:s0 diff --git a/non_plat/kernel.te b/non_plat/kernel.te index 15b2430..43bf6fd 100644 --- a/non_plat/kernel.te +++ b/non_plat/kernel.te @@ -47,12 +47,6 @@ allow kernel misc2_block_device:blk_file rw_file_perms; # Date : WK16.30 # Operation: SQC # Purpose: Allow sdcardfs workqueue to access lower file systems -allow kernel { fuseblk }:dir create_dir_perms; -allow kernel { fuseblk }:file create_file_perms; - -# Date : WK16.30 -# Operation: SQC -# Purpose: Allow sdcardfs workqueue to access lower file systems allow kernel {vfat mnt_media_rw_file}:dir create_dir_perms; allow kernel {vfat mnt_media_rw_file}:file create_file_perms; allow kernel kernel:key { write search setattr }; |