am 2b8bf155: am 303e139a: am b76966d6: recovery: remove auditallow for exec_type:dir writes

* commit '2b8bf155': recovery: remove auditallow for exec_type:dir writes

am 2b8bf155: am 303e139a: am b76966d6: recovery: remove auditallow for exec_type:dir writes
* commit '2b8bf155': recovery: remove auditallow for exec_type:dir writes
3a2cbf9c · Nick Kralevich · Android Git Automerger · f3a6abbb · 2b8bf155 · 3a2cbf9c
Commit 3a2cbf9c authored 10 years ago by Nick Kralevich Committed by Android Git Automerger 10 years ago
--- a/recovery.te
+++ b/recovery.te
@@ -36,11 +36,9 @@ recovery_only(`
  # support to OTAs. However, that code has a bug. When an update occurs,
  # some directories are inappropriately labeled as exec_type. This is
  # only transient, and subsequent steps in the OTA script correct this
-  # mistake.
+  # mistake. New devices are moving to block based OTAs, so this is not
-  # Allow this behavior for now until we can fix the underlying bug.
+  # worth fixing. b/15575013
-  # b/15575013
  allow recovery exec_type:dir { create_dir_perms relabelfrom relabelto };
-  auditallow recovery exec_type:dir { create_dir_perms relabelfrom relabelto };
  # Write to /proc/sys/vm/drop_caches
  # TODO: create more specific label?