blob: a073c9abb07d105663b52e1dc7022c29bd681e5d [file] [log] [blame]
From 837973ddf1da4d9dd83b21071c59401362a0e745 Mon Sep 17 00:00:00 2001
From: Pierre-Hugues Husson <phh@phh.me>
Date: Wed, 15 Aug 2018 12:27:21 +0200
Subject: [PATCH 2/2] Relax /proc read from ueventd, huawei needs it
---
prebuilts/api/28.0/private/domain.te | 1 +
private/domain.te | 1 +
2 files changed, 2 insertions(+)
diff --git a/prebuilts/api/28.0/private/domain.te b/prebuilts/api/28.0/private/domain.te
index fb6ba4f..95f0dbc 100644
--- a/prebuilts/api/28.0/private/domain.te
+++ b/prebuilts/api/28.0/private/domain.te
@@ -32,6 +32,7 @@ full_treble_only(`
# /proc
neverallow {
coredomain
+ -ueventd
-vold
} proc:file no_rw_file_perms;
diff --git a/private/domain.te b/private/domain.te
index fb6ba4f..95f0dbc 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -32,6 +32,7 @@ full_treble_only(`
# /proc
neverallow {
coredomain
+ -ueventd
-vold
} proc:file no_rw_file_perms;
--
2.7.4