diff --git a/tracking_denials/init.te b/tracking_denials/init.te deleted file mode 100644 index 6e62968e..00000000 --- a/tracking_denials/init.te +++ /dev/null @@ -1,2 +0,0 @@ -# b/192617244 -dontaudit init overlayfs_file:file rename; diff --git a/whitechapel/vendor/google/init.te b/whitechapel/vendor/google/init.te index 5d6a6810..e98d414f 100644 --- a/whitechapel/vendor/google/init.te +++ b/whitechapel/vendor/google/init.te @@ -18,3 +18,8 @@ allow init ram_device:blk_file w_file_perms; allow init per_boot_file:file ioctl; allowxperm init per_boot_file:file ioctl { F2FS_IOC_SET_PIN_FILE }; allow init sysfs_scsi_devices_0000:file w_file_perms; + +userdebug_or_eng(` + allow init overlayfs_file:file { rename }; + allow init overlayfs_file:chr_file { unlink }; +')