commit 98fcefb27657e3c59b700fabef5a71aced8ba7c6
author Treehugger Robot <treehugger-gerrit@google.com> Tue Apr 23 13:09:32 2019 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Tue Apr 23 13:09:32 2019 +0000
tree 1cacee484423388507e0c034d0c89fd1f6b7ea0f
parent fd2d7b3f5c7be29c7e8014c30be8d55272840c94
parent 5a234338c1974ac7110518c436051b1b6724085d

Merge "Fix denial of /debug_ramdisk/adb_debug.prop"

public/init.te

diff --git a/public/init.te b/public/init.te
index bde7ac6..c5b88d2 100644
--- a/public/init.te
+++ b/public/init.te
@@ -52,8 +52,8 @@
 # setrlimit
 allow init self:global_capability_class_set sys_resource;
 
-# Remove /dev/.booting, created before initial policy load or restorecon /dev.
-allow init tmpfs:file unlink;
+# Remove /dev/.booting and load /debug_ramdisk/* files
+allow init tmpfs:file { getattr unlink };
 
 # Access pty created for fsck.
 allow init devpts:chr_file { read write open };