Stephen Smalley committed 5b3acbe

Revert kernel domain changes since we now have a recovery domain.

Signed-off-by: Stephen Smalley <>

Comments (0)

Files changed (1)

 # Set checkreqprot by init.rc prior to switching to init domain.
 allow kernel self:security setcheckreqprot;
-# For /sbin/recovery until we set up its own domain.
-allow kernel self:process execmem;
-allow kernel ashmem_device:chr_file execute;