tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "domain_deprecated is dead"

Browse source
This commit is contained in:
Treehugger Robot 2017-07-28 23:13:17 +00:00 committed by Gerrit Code Review
commit f1b06df3d6
28 changed files with 1 additions and 36 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/atrace.te
View file

@ -3,7 +3,7 @@
type atrace_exec, exec_type, file_type; type atrace_exec, exec_type, file_type;
userdebug_or_eng(` userdebug_or_eng(`
type atrace, domain, coredomain, domain_deprecated; type atrace, domain, coredomain;
init_daemon_domain(atrace) init_daemon_domain(atrace)

9
private/attributes
View file

@ -1,9 +0,0 @@
# Temporary attribute used for migrating permissions out of domain.
# Motivation: Domain is overly permissive. Start removing permissions
# from domain and assign them to the domain_deprecated attribute.
# Domain_deprecated and domain can initially be assigned to all
# domains. The goal is to not assign domain_deprecated to new domains
# and to start removing domain_deprecated where it's not required or
# reassigning the appropriate permissions to the inheriting domain
# when necessary.
attribute domain_deprecated;

1
private/clatd.te
View file

@ -1,2 +1 @@
typeattribute clatd coredomain; typeattribute clatd coredomain;
typeattribute clatd domain_deprecated;

1
private/dex2oat.te
View file

@ -1,2 +1 @@
typeattribute dex2oat coredomain; typeattribute dex2oat coredomain;
typeattribute dex2oat domain_deprecated;

1
private/dhcp.te
View file

@ -1,5 +1,4 @@
typeattribute dhcp coredomain; typeattribute dhcp coredomain;
typeattribute dhcp domain_deprecated;
init_daemon_domain(dhcp) init_daemon_domain(dhcp)
type_transition dhcp system_data_file:{ dir file } dhcp_data_file; type_transition dhcp system_data_file:{ dir file } dhcp_data_file;

1
private/dumpstate.te
View file

@ -1,5 +1,4 @@
typeattribute dumpstate coredomain; typeattribute dumpstate coredomain;
typeattribute dumpstate domain_deprecated;
init_daemon_domain(dumpstate) init_daemon_domain(dumpstate)

1
private/fingerprintd.te
View file

@ -1,4 +1,3 @@
typeattribute fingerprintd coredomain; typeattribute fingerprintd coredomain;
typeattribute fingerprintd domain_deprecated;
init_daemon_domain(fingerprintd) init_daemon_domain(fingerprintd)

1
private/fsck.te
View file

@ -1,4 +1,3 @@
typeattribute fsck coredomain; typeattribute fsck coredomain;
typeattribute fsck domain_deprecated;
init_daemon_domain(fsck) init_daemon_domain(fsck)

1
private/fsck_untrusted.te
View file

@ -1,2 +1 @@
typeattribute fsck_untrusted coredomain; typeattribute fsck_untrusted coredomain;
typeattribute fsck_untrusted domain_deprecated;

1
private/installd.te
View file

@ -1,5 +1,4 @@
typeattribute installd coredomain; typeattribute installd coredomain;
typeattribute installd domain_deprecated;
init_daemon_domain(installd) init_daemon_domain(installd)

1
private/keystore.te
View file

@ -1,4 +1,3 @@
typeattribute keystore coredomain; typeattribute keystore coredomain;
typeattribute keystore domain_deprecated;
init_daemon_domain(keystore) init_daemon_domain(keystore)

1
private/mtp.te
View file

@ -1,4 +1,3 @@
typeattribute mtp coredomain; typeattribute mtp coredomain;
typeattribute mtp domain_deprecated;
init_daemon_domain(mtp) init_daemon_domain(mtp)

1
private/netd.te
View file

@ -1,5 +1,4 @@
typeattribute netd coredomain; typeattribute netd coredomain;
typeattribute netd domain_deprecated;
init_daemon_domain(netd) init_daemon_domain(netd)

1
private/perfprofd.te
View file

@ -1,5 +1,4 @@
userdebug_or_eng(` userdebug_or_eng(`
typeattribute perfprofd coredomain; typeattribute perfprofd coredomain;
typeattribute perfprofd domain_deprecated;
init_daemon_domain(perfprofd) init_daemon_domain(perfprofd)
') ')

1
private/platform_app.te
View file

@ -3,7 +3,6 @@
### ###
typeattribute platform_app coredomain; typeattribute platform_app coredomain;
typeattribute platform_app domain_deprecated;
app_domain(platform_app) app_domain(platform_app)

1
private/ppp.te
View file

@ -1,4 +1,3 @@
typeattribute ppp coredomain; typeattribute ppp coredomain;
typeattribute ppp domain_deprecated;
domain_auto_trans(mtp, ppp_exec, ppp) domain_auto_trans(mtp, ppp_exec, ppp)

1
private/radio.te
View file

@ -1,5 +1,4 @@
typeattribute radio coredomain; typeattribute radio coredomain;
typeattribute radio domain_deprecated;
app_domain(radio) app_domain(radio)

1
private/recovery.te
View file

@ -1,2 +1 @@
typeattribute recovery coredomain; typeattribute recovery coredomain;
typeattribute recovery domain_deprecated;

1
private/runas.te
View file

@ -1,5 +1,4 @@
typeattribute runas coredomain; typeattribute runas coredomain;
typeattribute runas domain_deprecated;
# ndk-gdb invokes adb shell run-as. # ndk-gdb invokes adb shell run-as.
domain_auto_trans(shell, runas_exec, runas) domain_auto_trans(shell, runas_exec, runas)

1
private/sdcardd.te
View file

@ -1,4 +1,3 @@
typeattribute sdcardd coredomain; typeattribute sdcardd coredomain;
typeattribute sdcardd domain_deprecated;
type_transition sdcardd system_data_file:{ dir file } media_rw_data_file; type_transition sdcardd system_data_file:{ dir file } media_rw_data_file;

1
private/shared_relro.te
View file

@ -1,5 +1,4 @@
typeattribute shared_relro coredomain; typeattribute shared_relro coredomain;
typeattribute shared_relro domain_deprecated;
# The shared relro process is a Java program forked from the zygote, so it # The shared relro process is a Java program forked from the zygote, so it
# inherits from app to get basic permissions it needs to run. # inherits from app to get basic permissions it needs to run.

1
private/system_app.te
View file

@ -5,7 +5,6 @@
### ###
typeattribute system_app coredomain; typeattribute system_app coredomain;
typeattribute system_app domain_deprecated;
app_domain(system_app) app_domain(system_app)
net_domain(system_app) net_domain(system_app)

1
private/system_server.te
View file

@ -4,7 +4,6 @@
# #
typeattribute system_server coredomain; typeattribute system_server coredomain;
typeattribute system_server domain_deprecated;
typeattribute system_server mlstrustedsubject; typeattribute system_server mlstrustedsubject;
# Define a type for tmpfs-backed ashmem regions. # Define a type for tmpfs-backed ashmem regions.

1
private/ueventd.te
View file

@ -1,4 +1,3 @@
typeattribute ueventd coredomain; typeattribute ueventd coredomain;
typeattribute ueventd domain_deprecated;
tmpfs_domain(ueventd) tmpfs_domain(ueventd)

1
private/uncrypt.te
View file

@ -1,4 +1,3 @@
typeattribute uncrypt coredomain; typeattribute uncrypt coredomain;
typeattribute uncrypt domain_deprecated;
init_daemon_domain(uncrypt) init_daemon_domain(uncrypt)

1
private/update_engine.te
View file

@ -1,4 +1,3 @@
typeattribute update_engine coredomain; typeattribute update_engine coredomain;
typeattribute update_engine domain_deprecated;
init_daemon_domain(update_engine); init_daemon_domain(update_engine);

1
private/vold.te
View file

@ -1,5 +1,4 @@
typeattribute vold coredomain; typeattribute vold coredomain;
typeattribute vold domain_deprecated;
init_daemon_domain(vold) init_daemon_domain(vold)

1
private/zygote.te
View file

@ -1,6 +1,5 @@
# zygote # zygote
typeattribute zygote coredomain; typeattribute zygote coredomain;
typeattribute zygote domain_deprecated;
typeattribute zygote mlstrustedsubject; typeattribute zygote mlstrustedsubject;
init_daemon_domain(zygote) init_daemon_domain(zygote)