Merge "sepolicy_vndr: remove unused cnd rules."

This commit is contained in:
qctecmdr 2021-07-22 11:28:16 -07:00 committed by Gerrit - the friendly Code Review server
commit 3411ac6de1
2 changed files with 0 additions and 22 deletions

View file

@ -72,17 +72,6 @@ allow $1 vendor_per_mgr_service:service_manager find;
get_prop($1, vendor_per_mgr_state_prop);
')
#####################################
# cnd_nims_socket_perm(clientdomain)
# allow vendor_cnd to read /proc/pid/cmdline to get appname
# allow vendor_cnd to use inet socket created by app.
define(`cnd_nims_socket_perm', `
allow vendor_cnd $1:dir r_dir_perms;
allow vendor_cnd $1:file r_file_perms;
allow vendor_cnd $1:fd use;
allow vendor_cnd $1:tcp_socket rw_socket_perms;
')
#####################################
# diag_use(clientdomain)
# allow clientdomain to read/write to diag

View file

@ -73,17 +73,6 @@ allow $1 vendor_per_mgr_service:service_manager find;
get_prop($1, vendor_per_mgr_state_prop);
')
#####################################
# cnd_nims_socket_perm(clientdomain)
# allow cnd to read /proc/pid/cmdline to get appname
# allow cnd to use inet socket created by app.
define(`cnd_nims_socket_perm', `
allow cnd $1:dir r_dir_perms;
allow cnd $1:file r_file_perms;
allow cnd $1:fd use;
allow cnd $1:tcp_socket rw_socket_perms;
')
#####################################
# diag_use(clientdomain)
# allow clientdomain to read/write to diag