am 200a9f0e: relax appdomain efs_file neverallow rules

* commit '200a9f0e': relax appdomain efs_file neverallow rules

am 200a9f0e: relax appdomain efs_file neverallow rules
* commit '200a9f0e': relax appdomain efs_file neverallow rules
ffc5671f · Nick Kralevich · Android Git Automerger · d1181635 · 200a9f0e · ffc5671f
Commit ffc5671f authored 10 years ago by Nick Kralevich Committed by Android Git Automerger 10 years ago
--- a/app.te
+++ b/app.te
@@ -314,8 +314,8 @@ neverallow appdomain
    { create write setattr relabelfrom relabelto append unlink link rename };

 # Access to factory files.
-neverallow appdomain
-    efs_file:dir_file_class_set { read write };
+neverallow appdomain efs_file:dir_file_class_set write;
+neverallow { appdomain -shell } efs_file:dir_file_class_set read;

 # Write to various pseudo file systems.
 neverallow { appdomain -bluetooth -nfc }