diff --git a/system_server.te b/system_server.te index 6737783dacfcc1a2ff32d78ee94bc8994d232b40..39a19e9060fc965622fd93b51a6810966f0df14d 100644 --- a/system_server.te +++ b/system_server.te @@ -351,9 +351,6 @@ r_dir_file(system_server, fscklogs) allow system_server fscklogs:dir { write remove_name }; allow system_server fscklogs:file unlink; -# For SELinuxPolicyInstallReceiver -selinux_manage_policy(system_server) - # logd access, system_server inherit logd write socket # (urge is to deprecate this long term) allow system_server zygote:unix_dgram_socket write; diff --git a/te_macros b/te_macros index e455e63162f8a5cbc2f42bec813bdf2c6d8823e2..1936ffbc236a8cd44e3773dd11d25ee9aa54ecd5 100644 --- a/te_macros +++ b/te_macros @@ -247,18 +247,6 @@ allow $1 security_file:dir r_dir_perms; allow $1 security_file:file r_file_perms; ') -##################################### -# selinux_manage_policy(domain) -# Ability to manage policy files and -# trigger runtime reload. -define(`selinux_manage_policy', ` -security_access_policy($1) -allow $1 security_file:dir create_dir_perms; -allow $1 security_file:file create_file_perms; -allow $1 security_file:lnk_file { create rename unlink }; -set_prop($1, security_prop) -') - ##################################### # mmac_manage_policy(domain) # Ability to manage mmac policy files,