commit 665b75e638398baf4ecacef9c725977af2634232
author Treehugger Robot <treehugger-gerrit@google.com> Mon Jan 09 20:30:21 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Mon Jan 09 20:30:22 2017 +0000
tree 91afc40c29172d6e71658a80df23f0cc9a242e31
parent b5f68f52c4ecfd85f8eeb2c4c4f6841910fe74a3
parent 9c038072231ea475cf0dc7a378f930e9b06e8dac

Merge "Split seapp_contexts into plat and nonplat components."

private/priv_app.te

diff --git a/private/priv_app.te b/private/priv_app.te
index 2c28b18..dc1690c 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -18,7 +18,7 @@
 
 # Some apps ship with shared libraries that they write out
 # to their sandbox directory and then dlopen().
-allow priv_app app_data_file:file { r_file_perms execute };
+allow priv_app app_data_file:file execute;
 
 allow priv_app audioserver_service:service_manager find;
 allow priv_app cameraserver_service:service_manager find;

public/install_recovery.te

diff --git a/public/install_recovery.te b/public/install_recovery.te
index 132b03d..06794ee 100644
--- a/public/install_recovery.te
+++ b/public/install_recovery.te
@@ -1,5 +1,5 @@
 # service flash_recovery in init.rc
-type install_recovery, domain, domain_deprecated;
+type install_recovery, domain;
 type install_recovery_exec, exec_type, file_type;
 
 allow install_recovery self:capability dac_override;