commit 06d7dca4a1abb9c2d197c2398969704ddaf39dc5
author Tri Vo <trong@google.com> Wed Jan 10 12:51:51 2018 -0800
committer Tri Vo <trong@google.com> Sat Jan 20 01:05:21 2018 +0000
tree 6c273910342e069408e12c7bce7f12ca02826a64
parent 04b70519cfe43c2961efd0c91c371f1bc53e02bd

Remove proc and sysfs access from system_app and platform_app.

Bug: 65643247
Test: manual
Test: browse internet
Test: take a picture
Change-Id: I9faff44b7a025c7422404d777113e40842ea26dd

private/system_app.te

diff --git a/private/system_app.te b/private/system_app.te
index c61bdd9..cd697a1 100644
--- a/private/system_app.te
+++ b/private/system_app.te
@@ -102,12 +102,8 @@
     user_changed
 };
 
-# /sys access
-r_dir_file(system_app, sysfs_type)
-
-# settings app reads /proc/version and /proc/pagetypeinfo
+# settings app reads /proc/version
 allow system_app {
-  proc
   proc_version
 }:file r_file_perms;