diff --git a/recovery.te b/recovery.te index 61c42b1380c118097562388eac9fca84539e786e..b0616ae173b5cb596780baf2ebb125d3fe6d765a 100644 --- a/recovery.te +++ b/recovery.te @@ -36,11 +36,9 @@ recovery_only(` # support to OTAs. However, that code has a bug. When an update occurs, # some directories are inappropriately labeled as exec_type. This is # only transient, and subsequent steps in the OTA script correct this - # mistake. - # Allow this behavior for now until we can fix the underlying bug. - # b/15575013 + # mistake. New devices are moving to block based OTAs, so this is not + # worth fixing. b/15575013 allow recovery exec_type:dir { create_dir_perms relabelfrom relabelto }; - auditallow recovery exec_type:dir { create_dir_perms relabelfrom relabelto }; # Write to /proc/sys/vm/drop_caches # TODO: create more specific label?