diff options
| author | Jeffrey Vander Stoep <jeffv@google.com> | 2015-08-28 17:43:23 +0000 |
|---|---|---|
| committer | Android (Google) Code Review <android-gerrit@google.com> | 2015-08-28 17:43:23 +0000 |
| commit | c94406f53f8a540d5944a7f923960e804698318a (patch) | |
| tree | 5dd3d7fb2c79e44f5176a2408336902d612fe674 /sepolicy | |
| parent | 076798a7b68b3fa7f4a0078b223358ea55e705c9 (diff) | |
| parent | ca1ab109fddb2eaf092ccd5e038b924d1455f66f (diff) | |
| download | bullhead-c94406f53f8a540d5944a7f923960e804698318a.tar.gz | |
Merge "Remove setuid, setgid, and dac_override capabailities from irqbalance." into mnc-dr-dev
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/msm_irqbalanced.te | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/sepolicy/msm_irqbalanced.te b/sepolicy/msm_irqbalanced.te index 58361d8..e660343 100644 --- a/sepolicy/msm_irqbalanced.te +++ b/sepolicy/msm_irqbalanced.te @@ -2,8 +2,6 @@ type msm_irqbalanced, domain; type msm_irqbalanced_exec, exec_type, file_type; init_daemon_domain(msm_irqbalanced) -allow msm_irqbalanced self:capability { setuid setgid dac_override }; -allow msm_irqbalanced sysfs_devices_system_cpu:file write; - +allow msm_irqbalanced sysfs_devices_system_cpu:file w_file_perms; allow msm_irqbalanced proc_irq:dir r_dir_perms; allow msm_irqbalanced proc_irq:file rw_file_perms; |