Skip to content
Snippets Groups Projects
Commit 51ad2ad3 authored by Nick Kralevich's avatar Nick Kralevich Committed by Android Git Automerger
Browse files

am c2ba5ed9: recovery: start enforcing SELinux rules

* commit 'c2ba5ed9':
  recovery: start enforcing SELinux rules
parents b23905e5 c2ba5ed9
No related branches found
No related tags found
No related merge requests found
...@@ -8,7 +8,6 @@ type recovery, domain; ...@@ -8,7 +8,6 @@ type recovery, domain;
# Otherwise recovery is only allowed the domain rules. # Otherwise recovery is only allowed the domain rules.
recovery_only(` recovery_only(`
allow recovery rootfs:file { entrypoint execute }; allow recovery rootfs:file { entrypoint execute };
permissive_or_unconfined(recovery)
allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin sys_tty_config }; allow recovery self:capability { chown dac_override fowner fsetid setfcap setuid setgid sys_admin sys_tty_config };
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment