property.te: delete security_prop am: ee751c33c5
am: b1985a8498
Change-Id: I8b6aebdbc8e27a4ea39e0fce93694fd96ed00873
This commit is contained in:
commit
8e280c9ce3
3 changed files with 0 additions and 5 deletions
|
@ -65,7 +65,6 @@ ro.device_owner u:object_r:device_logging_prop:s0
|
||||||
|
|
||||||
# selinux non-persistent properties
|
# selinux non-persistent properties
|
||||||
selinux.restorecon_recursive u:object_r:restorecon_prop:s0
|
selinux.restorecon_recursive u:object_r:restorecon_prop:s0
|
||||||
selinux. u:object_r:security_prop:s0
|
|
||||||
|
|
||||||
# default property context
|
# default property context
|
||||||
* u:object_r:default_prop:s0
|
* u:object_r:default_prop:s0
|
||||||
|
|
|
@ -229,9 +229,6 @@ neverallow { domain -recovery } self:capability2 mac_admin;
|
||||||
# It is sealed.
|
# It is sealed.
|
||||||
neverallow * kernel:security load_policy;
|
neverallow * kernel:security load_policy;
|
||||||
|
|
||||||
# Only init and the system_server shall use the property_service.
|
|
||||||
neverallow { domain -init -system_server } security_prop:property_service set;
|
|
||||||
|
|
||||||
# Only init prior to switching context should be able to set enforcing mode.
|
# Only init prior to switching context should be able to set enforcing mode.
|
||||||
# init starts in kernel domain and switches to init domain via setcon in
|
# init starts in kernel domain and switches to init domain via setcon in
|
||||||
# the init.rc, so the setenforce occurs while still in kernel. After
|
# the init.rc, so the setenforce occurs while still in kernel. After
|
||||||
|
|
|
@ -35,7 +35,6 @@ type powerctl_prop, property_type, core_property_type;
|
||||||
type radio_prop, property_type, core_property_type;
|
type radio_prop, property_type, core_property_type;
|
||||||
type restorecon_prop, property_type, core_property_type;
|
type restorecon_prop, property_type, core_property_type;
|
||||||
type safemode_prop, property_type;
|
type safemode_prop, property_type;
|
||||||
type security_prop, property_type, core_property_type;
|
|
||||||
type shell_prop, property_type, core_property_type;
|
type shell_prop, property_type, core_property_type;
|
||||||
type system_prop, property_type, core_property_type;
|
type system_prop, property_type, core_property_type;
|
||||||
type system_radio_prop, property_type, core_property_type;
|
type system_radio_prop, property_type, core_property_type;
|
||||||
|
|
Loading…
Reference in a new issue