tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Remove unused sepolicy by fsverity_init"

Browse source
This commit is contained in:
Treehugger Robot 2020-05-29 17:04:10 +00:00 committed by Gerrit Code Review
commit 5503debd17
2 changed files with 0 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
prebuilts/api/30.0/private/fsverity_init.te
View file

@ -3,11 +3,6 @@ type fsverity_init_exec, exec_type, file_type, system_file_type;
init_daemon_domain(fsverity_init)
# Allow to retrieve keys from keystore.
binder_use(fsverity_init)
use_keystore(fsverity_init)
allow fsverity_init keystore:keystore_key { list get };
# Allow to read /proc/keys for searching key id.
allow fsverity_init proc_keys:file r_file_perms;

5
private/fsverity_init.te
View file

@ -3,11 +3,6 @@ type fsverity_init_exec, exec_type, file_type, system_file_type;
init_daemon_domain(fsverity_init)
# Allow to retrieve keys from keystore.
binder_use(fsverity_init)
use_keystore(fsverity_init)
allow fsverity_init keystore:keystore_key { list get };
# Allow to read /proc/keys for searching key id.
allow fsverity_init proc_keys:file r_file_perms;