diff --git a/domain_deprecated.te b/domain_deprecated.te index 5bc8bda8af75cc770da941aed432e7c025a9baee..7be9a3e8c7f9d874cf2792ceea282ee30917fc3a 100644 --- a/domain_deprecated.te +++ b/domain_deprecated.te @@ -49,14 +49,10 @@ allow domain_deprecated dalvikcache_data_file:dir { search getattr }; allow domain_deprecated dalvikcache_data_file:file r_file_perms; # Read already opened /cache files. -allow domain_deprecated { cache_file cache_recovery_file }:dir r_dir_perms; -allow domain_deprecated { cache_file cache_recovery_file }:file { getattr read }; +allow domain_deprecated cache_file:dir r_dir_perms; +allow domain_deprecated cache_file:file { getattr read }; allow domain_deprecated cache_file:lnk_file r_file_perms; -# Likely not needed. auditallow to be sure -auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:dir r_dir_perms; -auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:file { getattr read }; - # For /acct/uid/*/tasks. allow domain_deprecated cgroup:dir { search write }; allow domain_deprecated cgroup:file w_file_perms;