From fa3eb773ce45c9c1a38a579f31799ffc00b85952 Mon Sep 17 00:00:00 2001 From: Nick Kralevich <nnk@google.com> Date: Fri, 21 Dec 2018 09:59:53 -0800 Subject: [PATCH] Revert "Audit execution of app_data_file native code." This reverts commit 890414725f35fae61a3f16532724c8f6365599f9. Unittest failures of JvmtiHostTest1906#testJvmti. To do a clean revert of b362474374afc402f65695252d30a008326c0eba, we need to also revert this change. Test: compiles Bug: 121333210 Bug: 111338677 --- private/untrusted_app_25.te | 1 - private/untrusted_app_27.te | 1 - 2 files changed, 2 deletions(-) diff --git a/private/untrusted_app_25.te b/private/untrusted_app_25.te index 0db825ae9..8825e2e78 100644 --- a/private/untrusted_app_25.te +++ b/private/untrusted_app_25.te @@ -49,7 +49,6 @@ allow untrusted_app_25 { apk_data_file app_data_file asec_public_file }:file exe # directories for targetApi<=25. This is also allowed for targetAPIs 26, # 27, and 28 in untrusted_app_27.te. allow untrusted_app_25 app_data_file:file { execute execute_no_trans }; -userdebug_or_eng(`auditallow untrusted_app_25 app_data_file:file { execute execute_no_trans };') # The ability to invoke dex2oat. Historically required by ART, now only # allowed for targetApi<=28 for compat reasons. diff --git a/private/untrusted_app_27.te b/private/untrusted_app_27.te index f3b9df821..fab6acc36 100644 --- a/private/untrusted_app_27.te +++ b/private/untrusted_app_27.te @@ -30,7 +30,6 @@ bluetooth_domain(untrusted_app_27) # The ability to call exec() or dlopen() on files in the apps home # directories for targetApi 26, 27, and 28. allow untrusted_app_27 app_data_file:file { execute execute_no_trans }; -userdebug_or_eng(`auditallow untrusted_app_27 app_data_file:file { execute execute_no_trans };') # The ability to invoke dex2oat. Historically required by ART, now only # allowed for targetApi<=28 for compat reasons. -- GitLab