vmnic won't allow to call TUNSETPERSIST anymore
Bug: 340376953
Test: atest MicrodroidTests
Change-Id: Icfce165b74b094620c506d645ace3c1e7d70e91e
diff --git a/private/vmnic.te b/private/vmnic.te
index 1b7e0d8..4a706df 100644
--- a/private/vmnic.te
+++ b/private/vmnic.te
@@ -17,7 +17,7 @@
allow vmnic self:global_capability_class_set net_admin;
allow vmnic self:tun_socket create_socket_perms_no_ioctl;
allow vmnic tun_device:chr_file rw_file_perms;
- allowxperm vmnic tun_device:chr_file ioctl { TUNGETIFF TUNSETIFF TUNSETPERSIST };
+ allowxperm vmnic tun_device:chr_file ioctl { TUNGETIFF TUNSETIFF };
allow vmnic self:udp_socket create_socket_perms;
allowxperm vmnic self:udp_socket ioctl SIOCSIFFLAGS;