don't allow su_exec in user build, thanks @MediatekAndroidDevelopers for the trick

2016-10-27 16:19:07 +02:00 · 2016-10-27 16:19:07 +02:00 · fb8b5d5acc
parent c90cf4fb7f
commit fb8b5d5acc
1 changed files with 2 additions and 0 deletions
--- a/sepolicy/shell.te
+++ b/sepolicy/shell.te
@ -100,7 +100,9 @@ allow shell block_device:dir search;
 # Operation : Migration
 # Purpose : for debugging in user debug load.
 #           su does't exist on user load.
+userdebug_or_eng(`
 allow shell su_exec:file rx_file_perms;
+')

 # Date : WK14.46
 # Operation : Migration