commit 30c23bc84a1b13305e96a0d8006ca23ceacb2b13
author Treehugger Robot <treehugger-gerrit@google.com> Fri Aug 19 14:04:17 2022 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Aug 19 14:04:17 2022 +0000
tree 02ecb9f74973fb3c81dfc5f5354921ad4cf39bb3
parent b570d75cd4ae60d1f12ce9b1cef718f06fc86c0c
parent 07ce6daa447cafb85158b7c7d8bd8a9ec5f7c0bd

Merge "De-dupe compos rules"

microdroid/system/private/compos.te

diff --git a/microdroid/system/private/compos.te b/microdroid/system/private/compos.te
index 386f11e..26dffe5 100644
--- a/microdroid/system/private/compos.te
+++ b/microdroid/system/private/compos.te
@@ -2,9 +2,6 @@
 type compos, domain, coredomain, microdroid_payload;
 type compos_exec, exec_type, file_type, system_file_type;
 
-# Expose RPC Binder service over vsock
-allow compos self:vsock_socket { create_socket_perms_no_ioctl listen accept };
-
 # Allow using various binder services
 binder_use(compos);
 allow compos authfs_binder_service:service_manager find;