From 0fa81a27a09ecce1fcf3b90554098b952fe7d777 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Fri, 25 Nov 2016 17:37:30 -0800
Subject: [PATCH] Remove domain_deprecated from some domains.
No denials showing up in collected audit logs.
Bug: 28760354
Test: Device boots
Test: No unexpected denials in denial collection logs.
Change-Id: I5a0d4f3c51d296bfa04e71fc226a01dcf5b5b508
---
public/inputflinger.te | 2 +-
public/lmkd.te | 2 +-
public/servicemanager.te | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/public/inputflinger.te b/public/inputflinger.te
index bee392fac..14cfdc73f 100644
--- a/public/inputflinger.te
+++ b/public/inputflinger.te
@@ -1,5 +1,5 @@
# inputflinger
-type inputflinger, domain, domain_deprecated;
+type inputflinger, domain;
type inputflinger_exec, exec_type, file_type;
binder_use(inputflinger)
diff --git a/public/lmkd.te b/public/lmkd.te
index 8e3c61ad4..e25a77fd6 100644
--- a/public/lmkd.te
+++ b/public/lmkd.te
@@ -1,5 +1,5 @@
# lmkd low memory killer daemon
-type lmkd, domain, domain_deprecated, mlstrustedsubject;
+type lmkd, domain, mlstrustedsubject;
type lmkd_exec, exec_type, file_type;
allow lmkd self:capability { dac_override sys_resource kill };
diff --git a/public/servicemanager.te b/public/servicemanager.te
index 469c6375c..46b3b0e80 100644
--- a/public/servicemanager.te
+++ b/public/servicemanager.te
@@ -1,5 +1,5 @@
# servicemanager - the Binder context manager
-type servicemanager, domain, domain_deprecated, mlstrustedsubject;
+type servicemanager, domain, mlstrustedsubject;
type servicemanager_exec, exec_type, file_type;
# Note that we do not use the binder_* macros here.
--
GitLab