From 33e9c267ca0dabaf14ab8f4918cbce3fa463dba5 Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep Date: Tue, 11 Jul 2017 07:45:09 -0700 Subject: [PATCH] ueventd: remove redundant rules Ueventd is now granted write access to all files in /sys in core policy. avc: denied { write } for pid=790 comm="ueventd" name="uevent" dev="sysfs" ino=52014 scontext=u:r:ueventd:s0 tcontext=u:object_r:sysfs_usb_device:s0 tclass=file Bug: 63147833 Test: build Change-Id: I61f742a6151fe37ec99654bda6074f055a84a163 --- sepolicy/vendor/ueventd.te | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/sepolicy/vendor/ueventd.te b/sepolicy/vendor/ueventd.te index e7799ab8..dce69248 100644 --- a/sepolicy/vendor/ueventd.te +++ b/sepolicy/vendor/ueventd.te @@ -1,17 +1,3 @@ -allow ueventd sysfs_thermal:file w_file_perms; -allow ueventd sysfs_leds:file w_file_perms; -allow ueventd sysfs_camera:file w_file_perms; -allow ueventd sysfs_easel:file w_file_perms; -allow ueventd sysfs_fingerprint:file w_file_perms; -allow ueventd sysfs_graphics:file w_file_perms; -allow ueventd sysfs_laser:file w_file_perms; -allow ueventd sysfs_rmtfs:file w_file_perms; -allow ueventd sysfs_scsi_devices_0000:file write; -allow ueventd sysfs_soc:file w_file_perms; -allow ueventd sysfs_net:file w_file_perms; -allow ueventd sysfs_msm_subsys:file w_file_perms; -allow ueventd sysfs_bluetooth_writable:file w_file_perms; -allow ueventd sysfs_usb_c:file w_file_perms; allow ueventd firmware_file:dir search; allow ueventd firmware_file:file r_file_perms; allow ueventd tmpfs:blk_file getattr;