Merge "Remove appdomain sysfs auditallow." into nyc-dev
diff --git a/app.te b/app.te
index 8bc138d..b89d4e1 100644
--- a/app.te
+++ b/app.te
@@ -229,10 +229,6 @@
selinux_check_access(appdomain)
selinux_check_context(appdomain)
-# appdomain should not be accessing information on /sys
-auditallow { appdomain userdebug_or_eng(`-su') } sysfs:dir { open getattr read ioctl };
-auditallow { appdomain userdebug_or_eng(`-su') } sysfs:file r_file_perms;
-
# Apps receive an open tun fd from the framework for
# device traffic. Do not allow untrusted app to directly open tun_device
allow { appdomain -isolated_app } tun_device:chr_file { read write getattr ioctl append };