Commit 7f6cd5e4 authored by topjohnwu's avatar topjohnwu

Do not auto transit

parent e99185f0
...@@ -191,10 +191,6 @@ void sepol_min_rules() { ...@@ -191,10 +191,6 @@ void sepol_min_rules() {
sepol_allow("su", "su", "fifo_file", ALL); sepol_allow("su", "su", "fifo_file", ALL);
sepol_allow("su", "su", "lnk_file", ALL); sepol_allow("su", "su", "lnk_file", ALL);
sepol_allow("su", "su", "dir", ALL); sepol_allow("su", "su", "dir", ALL);
// Autotransition su socket to su_device
sepol_typetrans("su", "device", "file", "su_device", NULL);
sepol_typetrans("su", "device", "dir", "su_device", NULL);
sepol_allow("su_device", "tmpfs", "filesystem", "associate"); sepol_allow("su_device", "tmpfs", "filesystem", "associate");
// For sepolicy live patching // For sepolicy live patching
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment