commit d7ae84aec0fd3367d6b116ae9cd93a35e01694ee
author Tri Vo <trong@google.com> Tue Sep 19 10:55:49 2017 -0700
committer Tri Vo <trong@google.com> Tue Sep 19 10:55:54 2017 -0700
tree 33cea38ba8a23e6b5244602590bae4177e5a7b2f
parent 9ee232a816983b4ceaa04d36c5dd80b4c9349b96

Remove bootanim access to sysfs and cgroup label.

Bug: 65643247
Test: device boots without denials from bootanim to sysfs and cgroup.
Change-Id: Icf8c45906cb83e1b0a60737d67ae584b9d1b34aa

public/bootanim.te

diff --git a/public/bootanim.te b/public/bootanim.te
index 9ca6be0..29e58c7 100644
--- a/public/bootanim.te
+++ b/public/bootanim.te
@@ -32,8 +32,6 @@
 
 # Read access to pseudo filesystems.
 allow bootanim proc_meminfo:file r_file_perms;
-r_dir_file(bootanim, sysfs)
-r_dir_file(bootanim, cgroup)
 
 # System file accesses.
 allow bootanim system_file:dir r_dir_perms;