diff options
author | Nick Kralevich <nnk@google.com> | 2016-03-29 15:37:20 -0700 |
---|---|---|
committer | Nick Kralevich <nnk@google.com> | 2016-03-29 15:37:20 -0700 |
commit | c81ebe522c66dd6e6ef4419ecc7737e2e1740d59 (patch) | |
tree | 4174530cbf7f483e0ebdcfca48beef00f2d5e63c /install_recovery.te | |
parent | 6937aa93ac0a36f19cb13b81a282dedcad324be5 (diff) | |
download | sepolicy-main.tar.gz |
These files have been moved to system/sepolicy.
Bug: 27875478
Change-Id: I057784af0e9f6e43cd9a22ffce26fd63acccf98b
Diffstat (limited to 'install_recovery.te')
-rw-r--r-- | install_recovery.te | 31 |
1 files changed, 0 insertions, 31 deletions
diff --git a/install_recovery.te b/install_recovery.te deleted file mode 100644 index 1c47236..0000000 --- a/install_recovery.te +++ /dev/null @@ -1,31 +0,0 @@ -# service flash_recovery in init.rc -type install_recovery, domain, domain_deprecated; -type install_recovery_exec, exec_type, file_type; - -init_daemon_domain(install_recovery) - -allow install_recovery self:capability dac_override; - -# /system/bin/install-recovery.sh is a shell script. -# Needs to execute /system/bin/sh -allow install_recovery shell_exec:file rx_file_perms; - -# Execute /system/bin/applypatch -allow install_recovery system_file:file rx_file_perms; - -allow install_recovery toolbox_exec:file rx_file_perms; - -# Update the recovery block device based off a diff of the boot block device -allow install_recovery block_device:dir search; -allow install_recovery boot_block_device:blk_file r_file_perms; -allow install_recovery recovery_block_device:blk_file rw_file_perms; - -# Create and delete /cache/saved.file -allow install_recovery { cache_file cache_recovery_file }:dir rw_dir_perms; -allow install_recovery { cache_file cache_recovery_file }:file create_file_perms; - -auditallow install_recovery cache_recovery_file:dir rw_dir_perms; -auditallow install_recovery cache_recovery_file:file create_file_perms; - -# Write to /proc/sys/vm/drop_caches -allow install_recovery proc_drop_caches:file w_file_perms; |