diff --git a/private/seapp_contexts b/private/seapp_contexts index 1f451be507bb10461a5e77f43b959d46af72bb67..dc7e3893bf4b57438a74f6b3b7cb35e8c22ac207 100644 --- a/private/seapp_contexts +++ b/private/seapp_contexts @@ -91,10 +91,6 @@ neverallow user=((?!_isolated).)* domain=isolated_app # uid's can be in shell domain neverallow user=shell domain=((?!shell).)* -# only the package named com.android.shell can run in the shell domain -neverallow domain=shell name=((?!com\.android\.shell).)* -neverallow user=shell name=((?!com\.android\.shell).)* - # Ephemeral Apps must run in the ephemeral_app domain neverallow isEphemeralApp=true domain=((?!ephemeral_app).)* @@ -104,7 +100,7 @@ user=bluetooth seinfo=platform domain=bluetooth type=bluetooth_data_file user=nfc seinfo=platform domain=nfc type=nfc_data_file user=radio seinfo=platform domain=radio type=radio_data_file user=shared_relro domain=shared_relro -user=shell seinfo=platform domain=shell name=com.android.shell type=shell_data_file +user=shell seinfo=platform domain=shell type=shell_data_file user=_isolated domain=isolated_app levelFrom=user user=_app seinfo=media domain=mediaprovider name=android.process.media type=app_data_file levelFrom=user user=_app seinfo=platform domain=platform_app type=app_data_file levelFrom=user