Merge "domain_deprecated.te: drop cache_recovery_file access" am: 8632b9e4cd
am: 563b2bfc73
* commit '563b2bfc73740720af9f9048ad164e6f5a9f9128':
domain_deprecated.te: drop cache_recovery_file access
diff --git a/domain_deprecated.te b/domain_deprecated.te
index 5bc8bda..7be9a3e 100644
--- a/domain_deprecated.te
+++ b/domain_deprecated.te
@@ -49,14 +49,10 @@
allow domain_deprecated dalvikcache_data_file:file r_file_perms;
# Read already opened /cache files.
-allow domain_deprecated { cache_file cache_recovery_file }:dir r_dir_perms;
-allow domain_deprecated { cache_file cache_recovery_file }:file { getattr read };
+allow domain_deprecated cache_file:dir r_dir_perms;
+allow domain_deprecated cache_file:file { getattr read };
allow domain_deprecated cache_file:lnk_file r_file_perms;
-# Likely not needed. auditallow to be sure
-auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:dir r_dir_perms;
-auditallow { domain_deprecated -init -system_server -dumpstate -install_recovery -platform_app -priv_app -uncrypt -recovery } cache_recovery_file:file { getattr read };
-
# For /acct/uid/*/tasks.
allow domain_deprecated cgroup:dir { search write };
allow domain_deprecated cgroup:file w_file_perms;