summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYongqin Liu <yongqin.liu@linaro.org>2014-09-25 14:55:11 +0800
committerYongqin Liu <yongqin.liu@linaro.org>2014-09-25 14:55:11 +0800
commit07b5859ffbacf87e77d8f90dcc0ada8d30a9861e (patch)
tree59021596a6573d8aeb51cb83867a2128459c232d
parent1ebb6b5f50c09ccbf0ab4bf3352b5784b539c804 (diff)
downloadcommon-07b5859ffbacf87e77d8f90dcc0ada8d30a9861e.tar.gz
shell.te: remove the hacks for ping/ifconfig/netcfg
since we do the hack to make console service to run with u:r:su:s0 context, we do not need the hacks here for running the ping/ifconfig/netcfg command. So delete the hacks here for the removal of hacks on external/sepolicy repository Change-Id: I8d963cf0599f85ed6abc0711168450ad1d823ca6 Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>
-rw-r--r--sepolicy/shell.te4
1 files changed, 0 insertions, 4 deletions
diff --git a/sepolicy/shell.te b/sepolicy/shell.te
index 708229f..b4f6f1b 100644
--- a/sepolicy/shell.te
+++ b/sepolicy/shell.te
@@ -4,12 +4,8 @@ allow shell serial_device:chr_file rw_file_perms;
allow shell dalvikcache_data_file:file rw_file_perms;
# hack for running netcfg eth0 dhcp/ifconfig/ping on console session
-allow shell self:capability { net_admin net_raw setuid dac_override dac_read_search sys_nice };
allow shell self:packet_socket create_socket_perms;
allow shell system_prop:property_service set;
# hack for running start adbd/stop adbd on console session
allow shell ctl_default_prop:property_service set;
-
-# hack for lava mkshrc
-allow shell unlabeled:file r_file_perms;