tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Revert "Add /boot files as ramdisk_boot_file.""

Browse source
This commit is contained in:
Yifan Hong 2020-10-08 22:28:43 +00:00 committed by Gerrit Code Review
commit 271ba1c3ff
6 changed files with 0 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/30.0/30.0.ignore.cil
View file

@ -30,7 +30,6 @@
profcollectd_data_file
profcollectd_exec
profcollectd_service
ramdisk_boot_file
shell_test_data_file
sysfs_devices_cs_etm
update_engine_stable_service

3
private/domain.te
View file

@ -437,6 +437,3 @@ full_treble_only(`
-vndk_sp_file
}:file *;
')
# Only first_stage_init can read files under /boot.
neverallow domain ramdisk_boot_file:dir_file_class_set *;

4
private/file_contexts
View file

@ -762,7 +762,3 @@
#############################
# mount point for read-write product partitions
/mnt/product(/.*)? u:object_r:mnt_product_file:s0
#############################
# Ramdisk files under /boot
/boot(/.*)? u:object_r:ramdisk_boot_file:s0

3
public/file.te
View file

@ -560,6 +560,3 @@ type audiohal_data_file, file_type, data_file_type, core_data_file_type;
# Should be:
# type apk_data_file, file_type, data_file_type;
neverallow fs_type file_type:filesystem associate;
# /boot
type ramdisk_boot_file, file_type;

6
public/init.te
View file

@ -179,7 +179,6 @@ allow init {
-misc_logd_file
-nativetest_data_file
-privapp_data_file
-ramdisk_boot_file
-system_app_data_file
-system_file_type
-vendor_file_type
@ -194,7 +193,6 @@ allow init {
-keystore_data_file
-misc_logd_file
-nativetest_data_file
-ramdisk_boot_file
-privapp_data_file
-shell_data_file
-system_app_data_file
@ -215,7 +213,6 @@ allow init {
-misc_logd_file
-nativetest_data_file
-privapp_data_file
-ramdisk_boot_file
-runtime_event_log_tags_file
-shell_data_file
-system_app_data_file
@ -235,7 +232,6 @@ allow init {
-misc_logd_file
-nativetest_data_file
-privapp_data_file
-ramdisk_boot_file
-shell_data_file
-system_app_data_file
-system_file_type
@ -255,7 +251,6 @@ allow init {
-misc_logd_file
-nativetest_data_file
-privapp_data_file
-ramdisk_boot_file
-shell_data_file
-system_app_data_file
-system_file_type
@ -272,7 +267,6 @@ allow init {
-exec_type
-app_data_file
-privapp_data_file
-ramdisk_boot_file
}:dir_file_class_set relabelto;
allow init { sysfs debugfs debugfs_tracing debugfs_tracing_debug }:{ dir file lnk_file } { getattr relabelfrom };

5
public/vendor_init.te
View file

@ -52,7 +52,6 @@ allow vendor_init {
-mnt_product_file
-password_slot_metadata_file
-ota_metadata_file
-ramdisk_boot_file
-unlabeled
-vendor_file_type
-vold_metadata_file
@ -69,7 +68,6 @@ allow vendor_init {
-exec_type
-password_slot_metadata_file
-ota_metadata_file
-ramdisk_boot_file
-runtime_event_log_tags_file
-system_file_type
-unlabeled
@ -87,7 +85,6 @@ allow vendor_init {
-exec_type
-password_slot_metadata_file
-ota_metadata_file
-ramdisk_boot_file
-system_file_type
-unlabeled
-vendor_file_type
@ -104,7 +101,6 @@ allow vendor_init {
-exec_type
-password_slot_metadata_file
-ota_metadata_file
-ramdisk_boot_file
-system_file_type
-unlabeled
-vendor_file_type
@ -121,7 +117,6 @@ allow vendor_init {
-mnt_product_file
-password_slot_metadata_file
-ota_metadata_file
-ramdisk_boot_file
-system_file_type
-vendor_file_type
-vold_metadata_file