| commit | ca5bb3371d01f5eb084046918d54bd34a4cbba2b | [log] [tgz] |
|---|---|---|
| author | Jeff Vander Stoep <jeffv@google.com> | Wed Jul 05 22:17:46 2017 -0700 |
| committer | Jeff Vander Stoep <jeffv@google.com> | Wed Jul 05 22:44:21 2017 -0700 |
| tree | 6a7c9dc4134f5135fa423acfc5bec8cee5a51173 | |
| parent | a92d3135619f83098600c65df62665c448497ee8 [diff] |
domain_deprecated: remove tmpfs dir access
Address "granted" audit messages for dumpstate use of df.
avc: granted { getattr } for comm="df" path="/mnt" dev="tmpfs"
scontext=u:r:dumpstate:s0 tcontext=u:object_r:tmpfs:s0
tclass=dir
avc: granted { search } for comm="df" name="/" dev="tmpfs"
scontext=u:r:dumpstate:s0 tcontext=u:object_r:tmpfs:s0
tclass=dir
Bug: 28760354
Test: Build, check logs.
Change-Id: I920948a5f0bce1b4bd2f15779730df8b3b1fea5a