commit 09ea21093b8748df749ebcf7734bee0b33e6cbb5
author Nick Kralevich <nnk@google.com> Thu Apr 07 13:56:03 2016 -0700
committer Nick Kralevich <nnk@google.com> Thu Apr 07 13:56:03 2016 -0700
tree 14ba0330dd7304326707d9131c5e6f26dc14dc22
parent 0044c7efd6d2eb0d8fe1ceba0aff3de88beacfd8

irsc_util: drop adbd domain transition to irsc_util

AFAIK, adbd never directly executes irsc_util, so drop the rules
allowing the domain transition. This is preventing security
hardening.

Bug: 27270128
Change-Id: Ia91fb8e31f4b1d3ae7bdf210e3a77cf87c40db39

sepolicy/irsc_util.te

diff --git a/sepolicy/irsc_util.te b/sepolicy/irsc_util.te
index a64cfd3..0b93d98 100644
--- a/sepolicy/irsc_util.te
+++ b/sepolicy/irsc_util.te
@@ -4,7 +4,6 @@
 
 userdebug_or_eng(`
   domain_auto_trans(shell, irsc_util_exec, irsc_util)
-  domain_auto_trans(adbd, irsc_util_exec, irsc_util)
 ')
 
 allow irsc_util irsc_util:socket {create ioctl};