From 7f6cd5e469806a8f857a60de00396628837446df Mon Sep 17 00:00:00 2001 From: topjohnwu Date: Mon, 17 Apr 2017 16:30:58 +0800 Subject: [PATCH] Do not auto transit --- rules.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/rules.c b/rules.c index dad30cb37..1b8c4dc81 100644 --- a/rules.c +++ b/rules.c @@ -191,10 +191,6 @@ void sepol_min_rules() { sepol_allow("su", "su", "fifo_file", ALL); sepol_allow("su", "su", "lnk_file", ALL); sepol_allow("su", "su", "dir", ALL); - - // Autotransition su socket to su_device - sepol_typetrans("su", "device", "file", "su_device", NULL); - sepol_typetrans("su", "device", "dir", "su_device", NULL); sepol_allow("su_device", "tmpfs", "filesystem", "associate"); // For sepolicy live patching