Skip to content

Commit e729eec

Browse files
aviraxptopjohnwu
authored andcommitted
Remove unnecessary file system permissions
Removed permissions for mounting loop devices, mirrors, and tmpfs.
1 parent a657af5 commit e729eec

1 file changed

Lines changed: 0 additions & 3 deletions

File tree

native/src/sepolicy/rules.rs

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -125,9 +125,6 @@ impl SePolicy {
125125
// Let init run stuffs
126126
allow(["init"], [proc], ["process"], all);
127127

128-
// For mounting loop devices, mirrors, tmpfs
129-
allow(["kernel"], ["fs_type", "dev_type", "file_type"], ["file"], ["read", "write"]);
130-
131128
// Zygisk rules
132129
allow(["zygote"], ["zygote"], ["process"], ["execmem"]);
133130
allow(["zygote"], ["fs_type"], ["filesystem"], ["unmount"]);

0 commit comments

Comments
 (0)