diff --git a/public/domain_deprecated.te b/public/domain_deprecated.te index e2c600e635a046710d74cd116b992f7389db3495..5c8c07eaefafa511c590384e2cf34165da1bbe50 100644 --- a/public/domain_deprecated.te +++ b/public/domain_deprecated.te @@ -1,32 +1,5 @@ # rules removed from the domain attribute -# System file accesses. -allow domain_deprecated system_file:dir r_dir_perms; -allow domain_deprecated system_file:file r_file_perms; -userdebug_or_eng(` -auditallow { - domain_deprecated - -appdomain - -fingerprintd - -installd - -keystore - -rild - -surfaceflinger - -system_server - -update_engine - -vold - -zygote -} system_file:dir { open read ioctl lock }; # search getattr in domain -auditallow { - domain_deprecated - -appdomain - -rild - -surfaceflinger - -system_server - -zygote -} system_file:file { ioctl lock }; # read open getattr in domain -') - # Read files already opened under /data. allow domain_deprecated system_data_file:file { getattr read }; allow domain_deprecated system_data_file:lnk_file r_file_perms;