commit 8629b439dc89ec3d0675a67b2989426255f61f08
author Nick Kralevich <nnk@google.com> Sat Jan 11 14:37:42 2014 -0800
committer Nick Kralevich <nnk@google.com> Sat Jan 11 14:37:42 2014 -0800
tree 278995ae6e87cc83317173a565467952766f4875
parent 2d3e2049d6d79600b4408f62fa88bc54ffb3451f

Use userdebug_or_eng in domain.te

For /dev/diag

Change-Id: I9692a0bb55cdf1d8bf4786f178be42dca44fea5f

BoardConfig.mk

diff --git a/BoardConfig.mk b/BoardConfig.mk
index 4412915..22a65fc 100644
--- a/BoardConfig.mk
+++ b/BoardConfig.mk
@@ -104,6 +104,7 @@
        bridge.te \
        camera.te \
        device.te \
+       domain.te \
        file.te \
        irsc_util.te \
        mediaserver.te \
@@ -127,10 +128,6 @@
        genfs_contexts \
        te_macros
 
-ifneq ($(TARGET_BUILD_VARIANT),user)
-       BOARD_SEPOLICY_UNION += domain.te
-endif
-
 HAVE_ADRENO_SOURCE:= false
 
 OVERRIDE_RS_DRIVER:= libRSDriver_adreno.so

sepolicy/domain.te

diff --git a/sepolicy/domain.te b/sepolicy/domain.te
index 31ab9b3..07223d1 100644
--- a/sepolicy/domain.te
+++ b/sepolicy/domain.te
@@ -1 +1,3 @@
-allow domain diag_device:chr_file rw_file_perms;
+userdebug_or_eng(`
+  allow domain diag_device:chr_file rw_file_perms;
+')