From 5a25fbf7ca281d2b372def95b92b400a073604b6 Mon Sep 17 00:00:00 2001
From: Riley Spahn <rileyspahn@google.com>
Date: Wed, 16 Jul 2014 09:42:06 -0700
Subject: [PATCH] Remove auditallow from system_server.
system_server auditallow statements were causing logspam and
there is not a good way to negate services from specific devices
so as a fix we are removing all system_server auditallows. These
logs may not be useful anyway because I suspsect that system_server
will probe for most all services anyway.
Change-Id: I27a05761c14def3a86b0749cdb895190bdcf9d71
---
system_server.te | 9 ---------
1 file changed, 9 deletions(-)
diff --git a/system_server.te b/system_server.te
index 5e217d42d..9d973dbbc 100644
--- a/system_server.te
+++ b/system_server.te
@@ -364,15 +364,6 @@ allow system_server system_server_service:service_manager add;
# Audited locally.
service_manager_local_audit_domain(system_server)
-auditallow system_server {
- service_manager_type
- -healthd_service
- -keystore_service
- -mediaserver_service
- -radio_service
- -surfaceflinger_service
- -system_server_service
-}:service_manager find;
allow system_server keystore:keystore_key {
test
--
GitLab