Restore ephemeral app access to /dev/ashmem
Bug: 124061057
Test: m selinux_policy
Test: vimeo aia launches
Change-Id: I8b49675c35a227737418c1b85c410bfac0e7e584
diff --git a/public/domain.te b/public/domain.te
index 265e4ab..e8baabc 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -68,8 +68,8 @@
domain
# TODO(b/113362644): route coredomain to ashmemd
#-coredomain
- -ephemeral_app
- # TODO(b/113362644): remove open permission from these domains.
+ # TODO(b/113362644): remove open permission from apps.
+ #-ephemeral_app
#-isolated_app
#-untrusted_app_all
} ashmem_device:chr_file rw_file_perms;