From dd7363fda2256d0262c07c1a4d3b238fb56168a7 Mon Sep 17 00:00:00 2001 From: Bill Napier <napier@google.com> Date: Wed, 14 Dec 2016 17:09:50 +0000 Subject: [PATCH] Revert "Merge "Do not allow new additions to core_property_type" am: d57dd813a2 am: f13dcbb4ae am: 5bfa850913 am: 47e2f08109" This reverts commit 635d206b0987bf2f18e3b966d35cca9e0e9c4ff7. Change-Id: I1f937794162b563a24bbc4f4c83a24be93812a54 --- public/property.te | 39 --------------------------------------- 1 file changed, 39 deletions(-) diff --git a/public/property.te b/public/property.te index e64ebcd2a..e4b8d6e43 100644 --- a/public/property.te +++ b/public/property.te @@ -43,42 +43,3 @@ type wifi_log_prop, property_type, log_property_type; type wifi_prop, property_type; allow property_type tmpfs:filesystem associate; - -### -### Neverallow rules -### - -# core_property_type should not be used for new properties or -# device specific properties. Properties with this attribute -# are readable to everyone, which is overly broad and should -# be avoided. -# New properties should have appropriate read / write access -# control rules written. - -neverallow * { - core_property_type - -audio_prop - -bluetooth_prop - -config_prop - -cppreopt_prop - -dalvik_prop - -debuggerd_prop - -debug_prop - -default_prop - -dhcp_prop - -dumpstate_prop - -ffs_prop - -fingerprint_prop - -logd_prop - -net_radio_prop - -nfc_prop - -pan_result_prop - -persist_debug_prop - -powerctl_prop - -radio_prop - -restorecon_prop - -shell_prop - -system_prop - -system_radio_prop - -vold_prop -}:file no_rw_file_perms; -- GitLab