Merge "Don't grant domain device:dir rw_dir_perms"

0341e1ab · Nick Kralevich · Gerrit Code Review · a03d761f · 2bcea0a3 · 0341e1ab
Commit 0341e1ab authored 10 years ago by Nick Kralevich Committed by Gerrit Code Review 10 years ago
--- a/te_macros
+++ b/te_macros
@@ -337,10 +337,7 @@ define(`permissive_or_unconfined', ifelse(force_permissive_to_unconfined, `false
 # daemon via sockets
 define(`write_logd', `
 userdebug_or_eng(`
-  # Debug output
-  type_transition $1 device:file logd_debug;
-  allow $1 device:dir rw_dir_perms;
-  allow $1 logd_debug:file create_file_perms;
+  allow $1 logd_debug:file w_file_perms;
 ')
 unix_socket_send($1, logdw, logd)
 ')