Skip to content
Snippets Groups Projects
Commit 4d5721a5 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by Jeffrey Vander Stoep
Browse files

Remove adbd tcontexts from domain_deprecated

Logs indicate apps, system_server, and runas are the only
domains that require this permission.

Bug: 28760354
Test: check logs.
Change-Id: I93dc53ec2d892bb91c0cd6f5d7e9cbf76b9bcd9f
parent 2be9799b
No related branches found
No related tags found
No related merge requests found
...@@ -20,13 +20,6 @@ userdebug_or_eng(` ...@@ -20,13 +20,6 @@ userdebug_or_eng(`
auditallow { domain_deprecated -appdomain -netd -surfaceflinger } system_server:fd use; auditallow { domain_deprecated -appdomain -netd -surfaceflinger } system_server:fd use;
') ')
# Connect to adbd and use a socket transferred from it.
# This is used for e.g. adb backup/restore.
allow domain_deprecated adbd:fd use;
userdebug_or_eng(`
auditallow { domain_deprecated -appdomain -system_server -runas } adbd:fd use;
')
# Root fs. # Root fs.
allow domain_deprecated rootfs:dir r_dir_perms; allow domain_deprecated rootfs:dir r_dir_perms;
allow domain_deprecated rootfs:file r_file_perms; allow domain_deprecated rootfs:file r_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment