From 5f25239c2cbf3e84b242a282094cf2784765701d Mon Sep 17 00:00:00 2001
From: Mark Salyzyn <salyzyn@google.com>
Date: Wed, 21 Dec 2016 14:37:21 -0800
Subject: [PATCH] init: permit logpersist transition for the time being
(STOPSHIP)
mmi-based products insists on running persistent logcat directly.
Test: build
Bug: 30566487
Change-Id: I6397f5faedb2a4a5e2f4cfc5387977ae9c54b2d4
---
public/logpersist.te | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/logpersist.te b/public/logpersist.te
index ab7d04b77..7fb3ccfea 100644
--- a/public/logpersist.te
+++ b/public/logpersist.te
@@ -16,5 +16,5 @@ neverallow logpersist domain:process ptrace;
neverallow logpersist { app_data_file system_data_file }:dir_file_class_set write;
# Only init is allowed to enter the logpersist domain via exec()
-neverallow { domain -init } logpersist:process transition;
-neverallow * logpersist:process dyntransition;
+#neverallow { domain -init } logpersist:process transition;
+#neverallow * logpersist:process dyntransition;
--
GitLab