From 33e9a11c6bdf996235e4f358dd1a074e2d8d1617 Mon Sep 17 00:00:00 2001 From: Davide Garberi Date: Sun, 29 Sep 2019 19:51:23 +0200 Subject: msm8996-common: sepolicy: Remove tee_device addresses * These are neverallows on Q Change-Id: I1f7203f830a67d34eab85e7b9707585614a678b9 --- sepolicy/init.te | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/sepolicy/init.te b/sepolicy/init.te index 5f80ca1..68dd5a7 100644 --- a/sepolicy/init.te +++ b/sepolicy/init.te @@ -1,7 +1,6 @@ -allow init { ion_device tee_device }:chr_file ioctl; +allow init ion_device:chr_file ioctl; allow init hidl_base_hwservice:hwservice_manager add; allow init sysfs_fingerprint:file { open read setattr write }; -allow init tee_device:chr_file write; allow init hidl_base_hwservice:hwservice_manager add; allow init sysfs_graphics:lnk_file read; allow init adsprpcd_file:filesystem { mount relabelfrom relabelto }; -- cgit v1.2.3