Merge "remove access_kmsg macro, because it to be more explicit."

am: fea9ad7c

* commit 'fea9ad7c':
  remove access_kmsg macro, because it to be more explicit.

recovery.te

@@ -48,7 +48,7 @@ recovery_only(`
   # TODO: create more specific label?
   allow recovery sysfs:file w_file_perms;
 
-  access_kmsg(recovery)
+  allow recovery kernel:system syslog_read;
 
   # Access /dev/android_adb or /dev/usb-ffs/adb/ep0
   allow recovery adb_device:chr_file rw_file_perms;

te_macros

@@ -269,16 +269,6 @@ allow $1 security_file:lnk_file { create rename unlink };
 set_prop($1, security_prop)
 ')
 
-#####################################
-# access_kmsg(domain)
-# Ability to read from kernel logs
-# and execute the klogctl syscall
-# in a non destructive manner. See
-# man 2 klogctl
-define(`access_kmsg', `
-allow $1 kernel:system syslog_read;
-')
-
 #####################################
 # create_pty(domain)
 # Allow domain to create and use a pty, isolated from any other domain ptys.