Merge "recovery: enable permissive_or_unconfined"

This commit is contained in:
Nick Kralevich 2014-06-02 17:44:31 +00:00 committed by Gerrit Code Review
commit 3957ae733f

View File

@ -8,7 +8,7 @@ type recovery, domain;
# Otherwise recovery is only allowed the domain rules.
recovery_only(`
allow recovery rootfs:file entrypoint;
unconfined_domain(recovery)
permissive_or_unconfined(recovery)
# Set security contexts on files that are not known to the loaded policy.
allow recovery self:capability2 mac_admin;