recovery: clean up audit logspam
avc: granted { search } scontext=u:r:recovery:s0 tcontext=u:object_r:cache_file:s0 tclass=dir
avc: granted { getattr } scontext=u:r:recovery:s0 tcontext=u:object_r:rootfs:s0 tclass=file
avc: granted { read } scontext=u:r:recovery:s0 tcontext=u:object_r:rootfs:s0 tclass=file
avc: granted { read open } scontext=u:r:recovery:s0 tcontext=u:object_r:rootfs:s0 tclass=file
avc: granted { read } scontext=u:r:recovery:s0 tcontext=u:object_r:sysfs:s0 tclass=file
avc: granted { read open } scontext=u:r:recovery:s0 tcontext=u:object_r:sysfs:s0 tclass=file
avc: granted { search } scontext=u:r:recovery:s0 tcontext=u:object_r:tmpfs:s0 tclass=dir
Fixes: 62619253
Test: policy builds, no more "granted" messages in dmesg for recovery.
Merged-In: I3f6d8ceee80307a01a8fd40cb4f8362a9825b1a3
Change-Id: I3f6d8ceee80307a01a8fd40cb4f8362a9825b1a3
(cherry picked from commit ea1d6e7dc253a79d666034ddb11df7bfa332b496)
diff --git a/public/domain_deprecated.te b/public/domain_deprecated.te
index ad84af9..f5231fb 100644
--- a/public/domain_deprecated.te
+++ b/public/domain_deprecated.te
@@ -7,6 +7,7 @@
domain_deprecated
-appdomain
-installd
+ -recovery
-sdcardd
-surfaceflinger
-system_server
@@ -25,6 +26,7 @@
-fsck
-healthd
-installd
+ -recovery
-servicemanager
-system_server
-ueventd
@@ -36,6 +38,7 @@
domain_deprecated
-healthd
-installd
+ -recovery
-servicemanager
-system_server
-ueventd
@@ -48,6 +51,7 @@
-appdomain
-healthd
-installd
+ -recovery
-servicemanager
-system_server
-ueventd
@@ -138,17 +142,20 @@
userdebug_or_eng(`
auditallow {
domain_deprecated
+ -recovery
-system_server
-vold
} cache_file:dir { open read search ioctl lock };
auditallow {
domain_deprecated
-appdomain
+ -recovery
-system_server
-vold
} cache_file:dir getattr;
auditallow {
domain_deprecated
+ -recovery
-system_server
-vold
} cache_file:file { getattr read };
@@ -190,6 +197,7 @@
-healthd
-netd
-rild
+ -recovery
-system_app
-surfaceflinger
-system_server
@@ -203,6 +211,7 @@
-healthd
-netd
-rild
+ -recovery
-system_app
-surfaceflinger
-system_server
@@ -216,6 +225,7 @@
-healthd
-netd
-rild
+ -recovery
-system_app
-surfaceflinger
-system_server