diff options
Diffstat (limited to 'domain.te')
| -rw-r--r-- | domain.te | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -238,7 +238,7 @@ neverallow * init:binder *; # Don't allow raw read/write/open access to block_device # Rather force a relabel to a more specific type -neverallow { domain -kernel -init -recovery -uncrypt } block_device:blk_file { open read write }; +neverallow { domain -kernel -init -recovery } block_device:blk_file { open read write }; # Don't allow raw read/write/open access to generic devices. # Rather force a relabel to a more specific type. |