From d1dd6fcdeebe446331d9fdd14e2ed8bdbbd1c051 Mon Sep 17 00:00:00 2001
From: Tom Cherry <tomcherry@google.com>
Date: Thu, 25 Jan 2018 13:52:45 -0800
Subject: [PATCH] Neverallow vendor_init from writing system_data_file
This neverallow exception is not needed.
Bug: 62875318
Test: build walleye, bullhead
Change-Id: Ide37ef9fe7a0e1cc4a1809589f78052007698cf5
---
public/domain.te | 1 -
1 file changed, 1 deletion(-)
diff --git a/public/domain.te b/public/domain.te
index 5879e26bb..9b4fc74cf 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -1040,7 +1040,6 @@ neverallow {
-system_server
-system_app
-init
- -vendor_init
-installd # for relabelfrom and unlink, check for this in explicit neverallow
with_asan(`-asan_extract')
} system_data_file:file no_w_file_perms;
--
GitLab