property.te: delete security_prop am: ee751c33c5

am: b1985a8498

Change-Id: I8b6aebdbc8e27a4ea39e0fce93694fd96ed00873
This commit is contained in:
Nick Kralevich 2016-11-11 22:50:54 +00:00 committed by android-build-merger
commit 8e280c9ce3
3 changed files with 0 additions and 5 deletions

View file

@ -65,7 +65,6 @@ ro.device_owner u:object_r:device_logging_prop:s0
# selinux non-persistent properties # selinux non-persistent properties
selinux.restorecon_recursive u:object_r:restorecon_prop:s0 selinux.restorecon_recursive u:object_r:restorecon_prop:s0
selinux. u:object_r:security_prop:s0
# default property context # default property context
* u:object_r:default_prop:s0 * u:object_r:default_prop:s0

View file

@ -229,9 +229,6 @@ neverallow { domain -recovery } self:capability2 mac_admin;
# It is sealed. # It is sealed.
neverallow * kernel:security load_policy; neverallow * kernel:security load_policy;
# Only init and the system_server shall use the property_service.
neverallow { domain -init -system_server } security_prop:property_service set;
# Only init prior to switching context should be able to set enforcing mode. # Only init prior to switching context should be able to set enforcing mode.
# init starts in kernel domain and switches to init domain via setcon in # init starts in kernel domain and switches to init domain via setcon in
# the init.rc, so the setenforce occurs while still in kernel. After # the init.rc, so the setenforce occurs while still in kernel. After

View file

@ -35,7 +35,6 @@ type powerctl_prop, property_type, core_property_type;
type radio_prop, property_type, core_property_type; type radio_prop, property_type, core_property_type;
type restorecon_prop, property_type, core_property_type; type restorecon_prop, property_type, core_property_type;
type safemode_prop, property_type; type safemode_prop, property_type;
type security_prop, property_type, core_property_type;
type shell_prop, property_type, core_property_type; type shell_prop, property_type, core_property_type;
type system_prop, property_type, core_property_type; type system_prop, property_type, core_property_type;
type system_radio_prop, property_type, core_property_type; type system_radio_prop, property_type, core_property_type;