Remove unnecessary file system permissions

Removed permissions for mounting loop devices, mirrors, and tmpfs.
This commit is contained in:
Wang Han
2025-12-02 08:41:02 +08:00
committed by John Wu
parent a657af5dc9
commit e729eec636

View File

@@ -125,9 +125,6 @@ impl SePolicy {
// Let init run stuffs
allow(["init"], [proc], ["process"], all);
// For mounting loop devices, mirrors, tmpfs
allow(["kernel"], ["fs_type", "dev_type", "file_type"], ["file"], ["read", "write"]);
// Zygisk rules
allow(["zygote"], ["zygote"], ["process"], ["execmem"]);
allow(["zygote"], ["fs_type"], ["filesystem"], ["unmount"]);