diff options
| author | Nick Kralevich <nnk@google.com> | 2015-03-05 23:13:44 +0000 |
|---|---|---|
| committer | Android Git Automerger <android-git-automerger@android.com> | 2015-03-05 23:13:44 +0000 |
| commit | 303e139a5cf5b40b744ac38e250b8224fd6404e0 (patch) | |
| tree | 25658c77c50723b125b8fce3d6bf8f44b8c73e4e /recovery.te | |
| parent | efb4bdb9f49d19f4ea9a7348eb019ed8d77955e4 (diff) | |
| parent | b76966d65d4e59cbb20b5a78bc583a9907a495da (diff) | |
| download | android_external_sepolicy-303e139a5cf5b40b744ac38e250b8224fd6404e0.tar.gz android_external_sepolicy-303e139a5cf5b40b744ac38e250b8224fd6404e0.tar.bz2 android_external_sepolicy-303e139a5cf5b40b744ac38e250b8224fd6404e0.zip | |
am b76966d6: recovery: remove auditallow for exec_type:dir writes
* commit 'b76966d65d4e59cbb20b5a78bc583a9907a495da':
recovery: remove auditallow for exec_type:dir writes
Diffstat (limited to 'recovery.te')
| -rw-r--r-- | recovery.te | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/recovery.te b/recovery.te index 87b6b5b..8576356 100644 --- a/recovery.te +++ b/recovery.te @@ -36,11 +36,9 @@ recovery_only(` # support to OTAs. However, that code has a bug. When an update occurs, # some directories are inappropriately labeled as exec_type. This is # only transient, and subsequent steps in the OTA script correct this - # mistake. - # Allow this behavior for now until we can fix the underlying bug. - # b/15575013 + # mistake. New devices are moving to block based OTAs, so this is not + # worth fixing. b/15575013 allow recovery exec_type:dir { create_dir_perms relabelfrom relabelto }; - auditallow recovery exec_type:dir { create_dir_perms relabelfrom relabelto }; # Write to /proc/sys/vm/drop_caches # TODO: create more specific label? |