sepolicy: Cleanup permissions

 * Remove unneeded permissions

Change-Id: Ie52577eb3cf06e3adb4be9e40016407e451e604d

2 files changed, 0 insertions, 18 deletions

diff --git a/sepolicy/init.te b/sepolicy/init.te
deleted file mode 100644
index 075823c..0000000
--- a/sepolicy/init.te
+++ /dev/null
@@ -1,17 +0,0 @@
-allow init socket_device:sock_file { create unlink setattr };
-allow init proc_dirty_ratio:file write;
-allow init vfat:dir mounton;
-
-allow init block_device:lnk_file relabelfrom;
-
-allow init { cache_block_device misc_block_device frp_block_device userdata_block_device rpmb_device dip_device recovery_block_device mba_debug_dev modem_efs_partition_device gpt_block_device  persist_block_device }:lnk_file relabelto;
-
-allow init init:socket { create bind read };
-allow init init:capability net_bind_service;
-
-allow init { ssd_device rpmb_device modem_efs_partition_device }:blk_file write;
-
-allow init qti_debugfs:file write;
-
-allow init { tee_device diag_device }:chr_file { write read open ioctl };
-allow init ion_device:chr_file { read open ioctl };
diff --git a/sepolicy/kernel.te b/sepolicy/kernel.te
deleted file mode 100644
index bd8c7b7..0000000
--- a/sepolicy/kernel.te
+++ /dev/null
@@ -1 +0,0 @@
-allow kernel tmpfs:dir search;