commit 0959aa67525725818c89b5cdeda11f1cad489066
author TreeHugger Robot <treehugger-gerrit@google.com> Sat Apr 16 00:28:26 2016 +0000
committer Android (Google) Code Review <android-gerrit@google.com> Sat Apr 16 00:28:26 2016 +0000
tree c228da75a60fbb2e78c8161698adc9d522e1f1f8
parent f77bc233ad7d3c7d3792d58ae96da1a522aeb73b
parent a499041fe89ecc85aa1b7809b277ae9cc86179f7

Merge "drop vold from sys_rawio neverallow exception" into nyc-dev

domain.te

diff --git a/domain.te b/domain.te
index bb9b225..9b2024b 100644
--- a/domain.te
+++ b/domain.te
@@ -166,7 +166,7 @@
 } self:capability mknod;
 
 # Limit raw I/O to these whitelisted domains.
-neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;
+neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
 
 # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
 neverallow * self:memprotect mmap_zero;