commit 226caf49e0f913a723ec6c707f9abf5516c6f906
author Daniel Cashman <dcashman@google.com> Tue Sep 29 16:35:17 2015 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Sep 29 16:35:17 2015 +0000
tree 4a3a4950a3d2006282b4a53eb61f0185b16d1cf4
parent 3746a0ae63a56a6b18fabd3e89bfe4760a1691e3
parent 6c451da4ec15f234eb591d638d4b501213af5b5a

Merge "Remove mediaserver sysfs write permissions."

mediaserver.te

diff --git a/mediaserver.te b/mediaserver.te
index 65438ba..d335ae8 100644
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -35,8 +35,7 @@
 allow mediaserver audio_device:chr_file rw_file_perms;
 
 # XXX Label with a specific type?
-allow mediaserver sysfs:file rw_file_perms;
-auditallow mediaserver sysfs:file { write append };
+allow mediaserver sysfs:file r_file_perms;
 
 # Read resources from open apk files passed over Binder.
 allow mediaserver apk_data_file:file { read getattr };