Skip to content

Commit

Permalink
Remove platform_app shell_data_file:lnk_file read access.
Browse files Browse the repository at this point in the history
Not sure what denial originally motivated adding this
access, but drop it and see if it resurfaces.  platform_app
is still permissive_or_unconfined() so this should not break
anything.

Change-Id: Ia4418080e3477346fa48d23b4bb5d53396ed5593
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
  • Loading branch information
stephensmalley committed May 7, 2014
1 parent 53cde70 commit 7785206
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion platform_app.te
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ bluetooth_domain(platform_app)
# Read from /data/local/tmp or /data/data/com.android.shell.
allow platform_app shell_data_file:dir search;
allow platform_app shell_data_file:file { open getattr read };
allow platform_app shell_data_file:lnk_file read;
# Populate /data/app/vmdl*.tmp, /data/app-private/vmdl*.tmp files
# created by system server.
allow platform_app { apk_tmp_file apk_private_tmp_file }:file rw_file_perms;
Expand Down

0 comments on commit 7785206

Please sign in to comment.