diff --git a/private/domain_deprecated.te b/private/domain_deprecated.te index 5a3226e6a0f48aba0fae31a9a48ca5826ec2a0af..3c6ba020869f13686dcff2fa80fe3a077e040177 100644 --- a/private/domain_deprecated.te +++ b/private/domain_deprecated.te @@ -1,50 +1,5 @@ # rules removed from the domain attribute -# Root fs. -allow domain_deprecated rootfs:dir r_dir_perms; -allow domain_deprecated rootfs:file r_file_perms; -allow domain_deprecated rootfs:lnk_file r_file_perms; -userdebug_or_eng(` -auditallow { - domain_deprecated - -fsck - -healthd - -installd - -recovery - -servicemanager - -system_server - -ueventd - -uncrypt - -vold - -zygote -} rootfs:dir { open getattr read ioctl lock }; # search granted in domain -auditallow { - domain_deprecated - -healthd - -installd - -recovery - -servicemanager - -system_server - -ueventd - -uncrypt - -vold - -zygote -} rootfs:file r_file_perms; -auditallow { - domain_deprecated - -appdomain - -healthd - -installd - -recovery - -servicemanager - -system_server - -ueventd - -uncrypt - -vold - -zygote -} rootfs:lnk_file { getattr open ioctl lock }; # read granted in domain -') - # System file accesses. allow domain_deprecated system_file:dir r_dir_perms; userdebug_or_eng(`