aboutsummaryrefslogtreecommitdiffstats
path: root/shell.te
diff options
context:
space:
mode:
authorWilliam Roberts <w.roberts@sta.samsung.com>2013-01-23 18:29:10 -0800
committerGerrit Code Review <noreply-gerritcodereview@google.com>2013-03-19 23:09:22 +0000
commit767abc077e10bd2325e2b566834e5d37d7765df0 (patch)
tree8e63b12103ea228a506d48d79f008f05d6acb31b /shell.te
parent1446e714af0b0c358b5ecf37c5d704c96c72cf7c (diff)
downloadandroid_external_sepolicy-767abc077e10bd2325e2b566834e5d37d7765df0.tar.gz
android_external_sepolicy-767abc077e10bd2325e2b566834e5d37d7765df0.tar.bz2
android_external_sepolicy-767abc077e10bd2325e2b566834e5d37d7765df0.zip
Drop shell from having access to dmesg
In normal, user builds, shell doesn't have the required DAC permissions to acess the kernel log. Change-Id: I001e6d65f508e07671bdb71ca2c0e1d53bc5b970
Diffstat (limited to 'shell.te')
-rw-r--r--shell.te6
1 files changed, 0 insertions, 6 deletions
diff --git a/shell.te b/shell.te
index 1f370d1..5b4d843 100644
--- a/shell.te
+++ b/shell.te
@@ -19,12 +19,6 @@ allow shell sdcard:file create_file_perms;
r_dir_file(shell, apk_data_file)
allow shell dalvikcache_data_file:file write;
-# Run dmesg.
-allow shell kernel:system syslog_read;
-
-# Run cat /proc/kmsg.
-allow shell kernel:system syslog_mod;
-
# Run logcat.
allow shell log_device:chr_file r_file_perms;