Merge "revert ipmemorystore selinux policy." am: f99aa3cb66

am: a2d7ab7f4b

Change-Id: I618ed916d463264a4f07d4f5468291006ce8e9c3
This commit is contained in:
Xiao Ma 2019-04-01 21:15:25 -07:00 committed by android-build-merger
commit ddabaebdec
8 changed files with 0 additions and 10 deletions

View file

@ -15,6 +15,3 @@ neverallow { appdomain -shell userdebug_or_eng(`-su') }
{ domain -appdomain -crash_dump -rs }:process { transition }; { domain -appdomain -crash_dump -rs }:process { transition };
neverallow { appdomain -shell userdebug_or_eng(`-su') } neverallow { appdomain -shell userdebug_or_eng(`-su') }
{ domain -appdomain }:process { dyntransition }; { domain -appdomain }:process { dyntransition };
# Disallow apps from using IP memory store
neverallow { appdomain -shell } ipmemorystore_service:service_manager *;

View file

@ -103,7 +103,6 @@
iorapd_exec iorapd_exec
iorapd_service iorapd_service
iorapd_tmpfs iorapd_tmpfs
ipmemorystore_service
kmsg_debug_device kmsg_debug_device
last_boot_reason_prop last_boot_reason_prop
llkd llkd

View file

@ -94,7 +94,6 @@
iorapd_exec iorapd_exec
iorapd_service iorapd_service
iorapd_tmpfs iorapd_tmpfs
ipmemorystore_service
last_boot_reason_prop last_boot_reason_prop
llkd llkd
llkd_exec llkd_exec

View file

@ -76,7 +76,6 @@
heapprofd_prop heapprofd_prop
heapprofd_socket heapprofd_socket
idmap_service idmap_service
ipmemorystore_service
iris_service iris_service
iris_vendor_data_file iris_vendor_data_file
llkd llkd

View file

@ -90,7 +90,6 @@ iphonesubinfo2 u:object_r:radio_service:s0
iphonesubinfo u:object_r:radio_service:s0 iphonesubinfo u:object_r:radio_service:s0
ims u:object_r:radio_service:s0 ims u:object_r:radio_service:s0
imms u:object_r:imms_service:s0 imms u:object_r:imms_service:s0
ipmemorystore u:object_r:ipmemorystore_service:s0
ipsec u:object_r:ipsec_service:s0 ipsec u:object_r:ipsec_service:s0
ircs u:object_r:radio_service:s0 ircs u:object_r:radio_service:s0
iris u:object_r:iris_service:s0 iris u:object_r:iris_service:s0

View file

@ -79,7 +79,6 @@ allow system_app {
-dumpstate_service -dumpstate_service
-installd_service -installd_service
-iorapd_service -iorapd_service
-ipmemorystore_service
-lpdump_service -lpdump_service
-netd_service -netd_service
-system_suspend_control_service -system_suspend_control_service

View file

@ -106,7 +106,6 @@ type hdmi_control_service, system_api_service, system_server_service, service_ma
type imms_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type imms_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type input_method_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type input_method_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type input_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type ipmemorystore_service, system_server_service, service_manager_type;
type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type iris_service, app_api_service, system_server_service, service_manager_type; type iris_service, app_api_service, system_server_service, service_manager_type;
type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type; type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;

View file

@ -12,7 +12,6 @@ allow traceur_app {
-gatekeeper_service -gatekeeper_service
-incident_service -incident_service
-installd_service -installd_service
-ipmemorystore_service
-iorapd_service -iorapd_service
-lpdump_service -lpdump_service
-netd_service -netd_service