strengthen debugfs neverallows
The comments here suggest they intended to put stronger
rules in place.
Bug: 281877578
Test: boot
Change-Id: I4c837c2e0f86f648c212fa7915275cd75319e663
diff --git a/private/ephemeral_app.te b/private/ephemeral_app.te
index 9f2b1d5..0491a33 100644
--- a/private/ephemeral_app.te
+++ b/private/ephemeral_app.te
@@ -66,7 +66,7 @@
# Too much leaky information in debugfs. It's a security
# best practice to ensure these files aren't readable.
-neverallow ephemeral_app debugfs:file read;
+neverallow ephemeral_app debugfs_type:file read;
# execute gpu_device
neverallow ephemeral_app gpu_device:chr_file execute;