From 97e8a770f6129986202161663edeaa1169e92914 Mon Sep 17 00:00:00 2001 From: Jeff Vander Stoep Date: Fri, 20 Oct 2017 13:00:40 -0700 Subject: [PATCH] Remove dumpstate HAL's access to radio app data These permissions no longer appear to be needed. Bug: 34980020 Test: adb bugreport, not denials for radio_data_file Change-Id: Id20a3cc87d78ef547811dffe230d13772f1504b0 --- sepolicy/vendor/hal_dumpstate_impl.te | 2 -- 1 file changed, 2 deletions(-) diff --git a/sepolicy/vendor/hal_dumpstate_impl.te b/sepolicy/vendor/hal_dumpstate_impl.te index 32b875d2..97a5c361 100644 --- a/sepolicy/vendor/hal_dumpstate_impl.te +++ b/sepolicy/vendor/hal_dumpstate_impl.te @@ -13,10 +13,8 @@ userdebug_or_eng(` domain_auto_trans(hal_dumpstate_impl, smlog_dump_exec, smlog_dump) allow hal_dumpstate_impl modem_dump_file:dir create_dir_perms; allow hal_dumpstate_impl modem_dump_file:file create_file_perms; - allow hal_dumpstate_impl radio_data_file:dir r_dir_perms; allow hal_dumpstate_impl radio_vendor_data_file:dir r_dir_perms; allow hal_dumpstate_impl netmgr_data_file:dir r_dir_perms; - allow hal_dumpstate_impl radio_data_file:file r_file_perms; allow hal_dumpstate_impl radio_vendor_data_file:file r_file_perms; allow hal_dumpstate_impl netmgr_data_file:file r_file_perms; allow hal_dumpstate_impl debugfs_ipc:dir r_dir_perms;