platform_system_sepolicy/su_user.te

# File types must be defined for file_contexts.
type su_exec, exec_type, file_type;

# No allow rules
Remove the su domain from -user builds. Change-Id: I86f2f28f7c558b8e9a70e5aa9ebcfa8bf26f9ef7 2013-03-15 14:30:27 +01:00			`# File types must be defined for file_contexts.`
Make sure exec_type is assigned to all entrypoint types. Some file types used as domain entrypoints were missing the exec_type attribute. Add it and add a neverallow rule to keep it that way. Change-Id: I7563f3e03940a27ae40ed4d6bb74181c26148849 Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov> 2013-09-27 16:38:14 +02:00			`type su_exec, exec_type, file_type;`
Remove the su domain from -user builds. Change-Id: I86f2f28f7c558b8e9a70e5aa9ebcfa8bf26f9ef7 2013-03-15 14:30:27 +01:00
			`# No allow rules`