From fb8b5d5acc1d6d0a61bfa7a283e7ba1126d64d9f Mon Sep 17 00:00:00 2001
From: Moyster <oysterized@gmail.com>
Date: Thu, 27 Oct 2016 16:19:07 +0200
Subject: [PATCH] don't allow su_exec in user build, thanks
 @MediatekAndroidDevelopers for the trick

---
 sepolicy/shell.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sepolicy/shell.te b/sepolicy/shell.te
index 2a9b254..da1cc2e 100755
--- a/sepolicy/shell.te
+++ b/sepolicy/shell.te
@@ -100,7 +100,9 @@ allow shell block_device:dir search;
 # Operation : Migration
 # Purpose : for debugging in user debug load.
 #           su does't exist on user load.
+userdebug_or_eng(`
 allow shell su_exec:file rx_file_perms;
+')
 
 # Date : WK14.46
 # Operation : Migration