zygote: clean up unnecessary rules.
In 66f25cb1af
, auditallow entries
were added for some old zygote rules. They've never been triggered,
so they're not needed. Delete them.
Change-Id: Idb544c71410e263714f29cdbec0424a46f32898f
This commit is contained in:
parent
2b749272fc
commit
a268f48a1f
1 changed files with 0 additions and 11 deletions
11
zygote.te
11
zygote.te
|
@ -46,14 +46,3 @@ allow zygote labeledfs:filesystem remount;
|
||||||
|
|
||||||
# Handle --invoke-with command when launching Zygote with a wrapper command.
|
# Handle --invoke-with command when launching Zygote with a wrapper command.
|
||||||
allow zygote zygote_exec:file rx_file_perms;
|
allow zygote zygote_exec:file rx_file_perms;
|
||||||
|
|
||||||
# handle bugreports b/10498304
|
|
||||||
allow zygote ashmem_device:chr_file execute;
|
|
||||||
allow zygote shell_data_file:file { write getattr };
|
|
||||||
allow zygote system_server:binder { transfer call };
|
|
||||||
allow zygote servicemanager:binder { call };
|
|
||||||
|
|
||||||
auditallow zygote ashmem_device:chr_file execute;
|
|
||||||
auditallow zygote shell_data_file:file { write getattr };
|
|
||||||
auditallow zygote system_server:binder { transfer call };
|
|
||||||
auditallow zygote servicemanager:binder { call };
|
|
||||||
|
|
Loading…
Reference in a new issue