Merge "Only the bluetooth app may run in the bluetooth domain" am: 35fd3212 am: fad50381

am: 20fa3aef Change-Id: I3f031cdd2d9f44b1154156383b13e1681aeefc2c

Merge "Only the bluetooth app may run in the bluetooth domain" am: 35fd3212 am: fad50381
a990e5fc · Jeff Vander Stoep · android-build-merger · b92c1659 · 20fa3aef · a990e5fc
Commit a990e5fc authored 7 years ago by Jeff Vander Stoep Committed by android-build-merger 7 years ago
--- a/public/domain.te
+++ b/public/domain.te
@@ -858,7 +858,7 @@ neverallow {

 # Only domains spawned from zygote and runas may have the appdomain attribute.
 neverallow { domain -runas -webview_zygote -zygote } {
-  appdomain -shell userdebug_or_eng(`-su') -bluetooth
+  appdomain -shell userdebug_or_eng(`-su')
 }:process { transition dyntransition };

 # Minimize read access to shell- or app-writable symlinks.