commit 06d7dca4a1abb9c2d197c2398969704ddaf39dc5
author Tri Vo <trong@google.com> Wed Jan 10 12:51:51 2018 -0800
committer Tri Vo <trong@google.com> Sat Jan 20 01:05:21 2018 +0000
tree 6c273910342e069408e12c7bce7f12ca02826a64
parent 04b70519cfe43c2961efd0c91c371f1bc53e02bd

Remove proc and sysfs access from system_app and platform_app.

Bug: 65643247
Test: manual
Test: browse internet
Test: take a picture
Change-Id: I9faff44b7a025c7422404d777113e40842ea26dd

private/genfs_contexts

diff --git a/private/genfs_contexts b/private/genfs_contexts
index 6be0ff3..1fddb6e 100644
--- a/private/genfs_contexts
+++ b/private/genfs_contexts
@@ -79,6 +79,7 @@
 genfscon proc /uptime u:object_r:proc_uptime:s0
 genfscon proc /version u:object_r:proc_version:s0
 genfscon proc /vmallocinfo u:object_r:proc_vmallocinfo:s0
+genfscon proc /vmstat u:object_r:proc_vmstat:s0
 genfscon proc /zoneinfo u:object_r:proc_zoneinfo:s0
 
 # selinuxfs booleans can be individually labeled.