From 030188f399f161922d6a43ae7ccfcbf8eefd132b Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Thu, 5 Jan 2017 13:06:19 -0800 Subject: [PATCH] Drop auditallow radio net_radio_prop:property_service set; Commit fee49159e introduced the net_radio_prop and system_radio_prop properties, and added allow rules for backwards compatibility. In addition, auditallow rules were added to see if the allow rules were necessary. The auditallow rules for radio net_radio_prop are triggering, so it's clear these properties are being set by the radio process. Drop the auditallow statement. Test: policy compiles. Change-Id: I7fa6df18ed4dd4cb8e0c9098373cc28134615330 --- public/radio.te | 1 - 1 file changed, 1 deletion(-) diff --git a/public/radio.te b/public/radio.te index f510a96f9..1e9ac56df 100644 --- a/public/radio.te +++ b/public/radio.te @@ -21,7 +21,6 @@ allow radio net_data_file:file r_file_perms; set_prop(radio, radio_prop) set_prop(radio, system_radio_prop) set_prop(radio, net_radio_prop) -auditallow radio net_radio_prop:property_service set; auditallow radio system_radio_prop:property_service set; # ctl interface -- GitLab