commit e1224de04d9c6ea52e753151441cdb378891cf6f
author Jeffrey Vander Stoep <jeffv@google.com> Fri Jan 22 00:27:50 2016 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Jan 22 00:27:50 2016 +0000
tree 1294ca2460544386b599c758d22f6efce4531685
parent 67d9932c6744885ee0ef3bab61bbae3b8f16de9b
parent fcea7263903b0e953f393ddb15fbfc071b992499

Merge "Allow domains to stat filesystems."

domain.te

diff --git a/domain.te b/domain.te
index fb672ad..2aba7e3 100644
--- a/domain.te
+++ b/domain.te
@@ -127,6 +127,10 @@
 allow domain debugfs_tracing:dir search;
 allow domain debugfs_trace_marker:file w_file_perms;
 
+# Filesystem access.
+allow domain fs_type:filesystem getattr;
+allow domain fs_type:dir getattr;
+
 ###
 ### neverallow rules
 ###

domain_deprecated.te

diff --git a/domain_deprecated.te b/domain_deprecated.te
index 7be9a3e..0db79da 100644
--- a/domain_deprecated.te
+++ b/domain_deprecated.te
@@ -25,10 +25,6 @@
 # Device accesses.
 allow domain_deprecated device:file read;
 
-# Filesystem accesses.
-allow domain_deprecated fs_type:filesystem getattr;
-allow domain_deprecated fs_type:dir getattr;
-
 # System file accesses.
 allow domain_deprecated system_file:dir r_dir_perms;
 allow domain_deprecated system_file:file r_file_perms;