commit 6ef4d9d6ea263fcb5bee12de7503307c8e46d2d7
author Yi-Yo Chiang <yochiang@google.com> Mon Mar 22 13:46:12 2021 +0800
committer Yo Chiang <yochiang@google.com> Tue Mar 23 09:59:18 2021 +0000
tree 356f055561867a311ae1ba956aef646ff1ec0103
parent 21e37b87e0feb63a959fe800008013d5ff18af63

gsid: Strengthen neverallow by s/notdevfile_class_set/file_class_set/

We're not doing anything special with device files, so no point
excluding them from the neverallow rules.
Principle of KISS.

Bug: 181110285
Test: Build pass
Change-Id: I0e203665aa2134579d97b580cb9301755edb62b1

private/gsid.te

diff --git a/private/gsid.te b/private/gsid.te
index a0b74b6..56def1d 100644
--- a/private/gsid.te
+++ b/private/gsid.te
@@ -168,7 +168,7 @@
     -gsid
     -fastbootd
     -vold
-} gsi_metadata_file:notdevfile_class_set ~{ relabelto getattr };
+} gsi_metadata_file:file_class_set ~{ relabelto getattr };
 
 neverallow {
     domain
@@ -176,7 +176,7 @@
     -gsid
     -fastbootd
     -vold
-} { gsi_data_file gsi_metadata_file }:notdevfile_class_set *;
+} { gsi_data_file gsi_metadata_file }:file_class_set *;
 
 neverallow {
     domain
@@ -193,4 +193,4 @@
 neverallow {
     domain
     -gsid
-} gsi_data_file:notdevfile_class_set ~{ relabelto getattr };
+} gsi_data_file:file_class_set ~{ relabelto getattr };