From 14e4406a1bcd0b639f36bcfe4eaaff1421858015 Mon Sep 17 00:00:00 2001 From: roynatech2544 Date: Sat, 21 May 2022 02:29:42 +0000 Subject: [PATCH] universal7885: sepolicy: Drop shell execute rules --- universal7885-common/sepolicy/private/hal_parts_default.te | 2 -- 1 file changed, 2 deletions(-) diff --git a/universal7885-common/sepolicy/private/hal_parts_default.te b/universal7885-common/sepolicy/private/hal_parts_default.te index e820a56..943448c 100644 --- a/universal7885-common/sepolicy/private/hal_parts_default.te +++ b/universal7885-common/sepolicy/private/hal_parts_default.te @@ -30,6 +30,4 @@ type parts_data_file, file_type, data_file_type, core_data_file_type; allow hal_parts_default parts_data_file:dir rw_dir_perms; allow hal_parts_default parts_data_file:file rw_file_perms; allow hal_parts_default parts_data_file:file create_file_perms; -allow hal_parts_default shell_exec:file rx_file_perms; -allow hal_parts_default toolbox_exec:file rx_file_perms; allow hal_parts_default self:capability sys_admin;