commit 0c6a04c9d1cdb348a95b6e2d8a48519f93a9ea0e
author Treehugger Robot <treehugger-gerrit@google.com> Sat Jan 07 04:25:09 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Sat Jan 07 04:25:11 2017 +0000
tree da4e5fe3ced5116606cfa24b6a72df41f9b821a7
parent 1a48ae576e2072afe6c9328be5e9b3b19a14537b
parent 1a022cbbe71e23f90e2ba55866e352dd6b14cdc8

Merge "storaged.te: Remove redundant permission."

public/platform_app.te

diff --git a/public/platform_app.te b/public/platform_app.te
index 6484319..c7e9a00 100644
--- a/public/platform_app.te
+++ b/public/platform_app.te
@@ -26,12 +26,8 @@
 allow platform_app media_rw_data_file:file create_file_perms;
 
 # Write to /cache.
-allow platform_app { cache_file cache_recovery_file }:dir create_dir_perms;
-allow platform_app { cache_file cache_recovery_file }:file create_file_perms;
-
-# Likely not needed
-auditallow platform_app cache_recovery_file:dir create_dir_perms;
-auditallow platform_app cache_recovery_file:file create_file_perms;
+allow platform_app cache_file:dir create_dir_perms;
+allow platform_app cache_file:file create_file_perms;
 
 # Direct access to vold-mounted storage under /mnt/media_rw
 # This is a performance optimization that allows platform apps to bypass the FUSE layer