From 001b10bdff87474ff1b3b246ea2f92baec3515cd Mon Sep 17 00:00:00 2001 From: SimHyunYong <jonesn5508@gmail.com> Date: Tue, 26 Jan 2016 16:42:54 +0900 Subject: [PATCH] remove access_kmsg macro, because it to be more explicit. This macro does not give us anything to it. Change-Id: Ie0b56716cc0144f0a59849647cad31e06a25acf1 --- recovery.te | 2 +- te_macros | 10 ---------- 2 files changed, 1 insertion(+), 11 deletions(-) diff --git a/recovery.te b/recovery.te index d2cc90ea2..afacf4094 100644 --- a/recovery.te +++ b/recovery.te @@ -48,7 +48,7 @@ recovery_only(` # TODO: create more specific label? allow recovery sysfs:file w_file_perms; - access_kmsg(recovery) + allow recovery kernel:system syslog_read; # Access /dev/android_adb or /dev/usb-ffs/adb/ep0 allow recovery adb_device:chr_file rw_file_perms; diff --git a/te_macros b/te_macros index 6d918354b..4d18973f4 100644 --- a/te_macros +++ b/te_macros @@ -269,16 +269,6 @@ allow $1 security_file:lnk_file { create rename unlink }; set_prop($1, security_prop) ') -##################################### -# access_kmsg(domain) -# Ability to read from kernel logs -# and execute the klogctl syscall -# in a non destructive manner. See -# man 2 klogctl -define(`access_kmsg', ` -allow $1 kernel:system syslog_read; -') - ##################################### # create_pty(domain) # Allow domain to create and use a pty, isolated from any other domain ptys. -- GitLab