tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "domain_deprecated.te: drop cache_recovery_file access"

Browse source
This commit is contained in:
Nick Kralevich 2016-01-16 20:50:14 +00:00 committed by Gerrit Code Review
commit 8632b9e4cd
1 changed files with 2 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
domain_deprecated.te
View file

@ -49,14 +49,10 @@ allow domain_deprecated dalvikcache_data_file:dir { search getattr };
allow domain_deprecated dalvikcache_data_file:file r_file_perms; allow domain_deprecated dalvikcache_data_file:file r_file_perms;
# Read already opened /cache files. # Read already opened /cache files.
allow domain_deprecated { cache_file cache_recovery_file }:dir r_dir_perms; allow domain_deprecated cache_file:dir r_dir_perms;
allow domain_deprecated { cache_file cache_recovery_file }:file { getattr read }; allow domain_deprecated cache_file:file { getattr read };
allow domain_deprecated cache_file:lnk_file r_file_perms; allow domain_deprecated cache_file:lnk_file r_file_perms;
# Likely not needed. auditallow to be sure
auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:dir r_dir_perms;
auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:file { getattr read };
# For /acct/uid/*/tasks. # For /acct/uid/*/tasks.
allow domain_deprecated cgroup:dir { search write }; allow domain_deprecated cgroup:dir { search write };
allow domain_deprecated cgroup:file w_file_perms; allow domain_deprecated cgroup:file w_file_perms;