From 5173b15558ee57edcd4f840d504c36f0f5b6873d Mon Sep 17 00:00:00 2001
From: Juju Sung <juju.sung@mediatek.com>
Date: Sat, 18 Jan 2020 10:20:59 +0800
Subject: [PATCH] [ALPS04767749] Remove noatsecure from sepolicy

This effectively disables LD_PRELOAD for init children and breaks
loading of libdirect-coredump.  This, however, is needed to avoid
layering violation and is the right thing to do long term.

MTK-Commit-Id: dafd04d1c1bbf0dae863774bfbd2c76cfecb2d98

Bug: 140789528
Test: Boot with boringssl_self_test32 enabled.
Change-Id: Id10c673694431dfae2fff401598e808a71e397ca
CR-Id: ALPS04767749
Feature: Android Exception Engine(AEE)
---
 r_non_plat/init.te | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/r_non_plat/init.te b/r_non_plat/init.te
index b93dcbf..9844687 100644
--- a/r_non_plat/init.te
+++ b/r_non_plat/init.te
@@ -41,9 +41,9 @@ allow init para_block_device:blk_file w_file_perms;
 # Date : WK15.32
 # Operation : Migration
 # Purpose : disable AT_SECURE for LD_PRELOAD
-userdebug_or_eng(`
-  allow init { domain -lmkd -crash_dump -llkd -mediaswcodec }:process noatsecure;
-')
+#userdebug_or_eng(`
+#  allow init { domain -lmkd -crash_dump -llkd -mediaswcodec }:process noatsecure;
+#')
 
 # Date : WK16.26
 # Operation : Access dynamic_debug control file