From 1e25b980747025eb74fe14923167f3711f7b0807 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Thu, 25 Apr 2013 14:46:36 -0700 Subject: [PATCH] Revert "Add the sysrq_file special file and give ADB write access." This rule doesn't work, as /proc/sysrq-trigger isn't properly labeled. Revert this change for now. This reverts commit bb2591e56f0b88570e8bed0008b932bf7c51f533. --- adbd.te | 3 --- file.te | 2 -- file_contexts | 3 --- 3 files changed, 8 deletions(-) diff --git a/adbd.te b/adbd.te index a92338fe6..4026fcb94 100644 --- a/adbd.te +++ b/adbd.te @@ -35,6 +35,3 @@ allow adbd shell:process noatsecure; # XXX Run screencap in a separate domain? binder_use(adbd) binder_call(adbd, surfaceflinger) - -# Write to the sysrq file -allow adbd sysrq_file:file w_file_perms; diff --git a/file.te b/file.te index 06ceeccd4..29b21061c 100644 --- a/file.te +++ b/file.te @@ -81,8 +81,6 @@ type security_file, file_type; type bluetooth_efs_file, file_type; # Downloaded files type download_file, file_type; -# The sysrq special file -type sysrq_file, file_type; # Socket types type adbd_socket, file_type; diff --git a/file_contexts b/file_contexts index 8906e389e..3d885b112 100644 --- a/file_contexts +++ b/file_contexts @@ -211,6 +211,3 @@ # asec containers /mnt/asec(/.*)? u:object_r:asec_apk_file:s0 /data/app-asec(/.*)? u:object_r:asec_image_file:s0 -############################# -# special /proc files -/proc/sysrq-trigger u:object_r:sysrq_file:s0 -- GitLab