tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sepolicy: Clean up moved files

Browse source 
Coalesce statements to clean up policies.

Test: m
Change-Id: I3794d6bf1bce04e700d2d8e3365249cf75bd527d
This commit is contained in:
Andreas Gampe 2019-02-22 08:36:41 -08:00
parent 4abfe60215
commit 2a9eaecf9a
3 changed files with 4 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/cppreopts.te
View file

@ -4,11 +4,9 @@
# partition. This domain ensures that we are only copying into specific # partition. This domain ensures that we are only copying into specific
# directories. # directories.
type cppreopts, domain, mlstrustedsubject; type cppreopts, domain, mlstrustedsubject, coredomain;
type cppreopts_exec, system_file_type, exec_type, file_type; type cppreopts_exec, system_file_type, exec_type, file_type;
typeattribute cppreopts coredomain;
# Technically not a daemon but we do want the transition from init domain to # Technically not a daemon but we do want the transition from init domain to
# cppreopts to occur. # cppreopts to occur.
init_daemon_domain(cppreopts) init_daemon_domain(cppreopts)

4
private/otapreopt_slot.te
View file

@ -1,11 +1,9 @@
# This command set moves the artifact corresponding to the current slot # This command set moves the artifact corresponding to the current slot
# from /data/ota to /data/dalvik-cache. # from /data/ota to /data/dalvik-cache.
type otapreopt_slot, domain, mlstrustedsubject; type otapreopt_slot, domain, mlstrustedsubject, coredomain;
type otapreopt_slot_exec, system_file_type, exec_type, file_type; type otapreopt_slot_exec, system_file_type, exec_type, file_type;
typeattribute otapreopt_slot coredomain;
# Technically not a daemon but we do want the transition from init domain to # Technically not a daemon but we do want the transition from init domain to
# cppreopts to occur. # cppreopts to occur.
init_daemon_domain(otapreopt_slot) init_daemon_domain(otapreopt_slot)

5
private/preopt2cachename.te
View file

@ -2,10 +2,9 @@
# #
# This executable translates names from the preopted versions the build system # This executable translates names from the preopted versions the build system
# creates to the names the runtime expects in the data directory. # creates to the names the runtime expects in the data directory.
type preopt2cachename, domain;
type preopt2cachename_exec, system_file_type, exec_type, file_type;
typeattribute preopt2cachename coredomain; type preopt2cachename, domain, coredomain;
type preopt2cachename_exec, system_file_type, exec_type, file_type;
# Allow write to stdout. # Allow write to stdout.
allow preopt2cachename cppreopts:fd use; allow preopt2cachename cppreopts:fd use;