From 38b7f43021ebc5c86503939f6c4064b2758a167b Mon Sep 17 00:00:00 2001
From: Stephen Smalley <sds@tycho.nsa.gov>
Date: Tue, 11 Feb 2014 09:40:47 -0500
Subject: [PATCH] Make inputflinger permissive or unconfined.

Otherwise we'll never see denials in userdebug or eng builds and
never make progress on confining it.  Of course we cannot truly
test until it is released into AOSP, but this prepares the way
and potentially allows for internal testing and collection of denials.

Change-Id: I800ab23baee1c84b7c4cf7399b17611a62ca6804
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
---
 inputflinger.te | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/inputflinger.te b/inputflinger.te
index 243bee3d1..dd5c08650 100644
--- a/inputflinger.te
+++ b/inputflinger.te
@@ -1,9 +1,8 @@
 # inputflinger
 type inputflinger, domain;
+permissive_or_unconfined(inputflinger)
 type inputflinger_exec, exec_type, file_type;
 
 init_daemon_domain(inputflinger)
 binder_use(inputflinger)
 binder_service(inputflinger)
-
-unconfined_domain(inputflinger)
-- 
GitLab