88ce951d89
Create a new m4 macro called userdebug_or_eng. Arguments passed to this macro are only emitted if we're performing a userdebug or eng build. Merge shell.te and shell_user.te and eliminate duplicate lines. Same for su.te and su_user.te Change-Id: I8fbabca65ec392aeafd5b90cef57b5066033fad0
17 lines
404 B
Text
17 lines
404 B
Text
# Domain for shell processes spawned by ADB
|
|
type shell, domain, shelldomain, mlstrustedsubject;
|
|
type shell_exec, exec_type, file_type;
|
|
|
|
# Create and use network sockets.
|
|
net_domain(shell)
|
|
|
|
# Run app_process.
|
|
# XXX Transition into its own domain?
|
|
app_domain(shell)
|
|
|
|
userdebug_or_eng(`
|
|
# userdebug/eng shell is also permissive to permit setenforce.
|
|
permissive shell;
|
|
')
|
|
|
|
# inherits from shelldomain.te
|