Remove system_server create access from /data/dalvik-cache
Bug: 16875245
Change-Id: I2487a80896a4a923fb1fa606f537df9f6ad4220a
diff --git a/system_app.te b/system_app.te
index 2a7421b..9a336f9 100644
--- a/system_app.te
+++ b/system_app.te
@@ -24,9 +24,6 @@
# Read wallpaper file.
allow system_app wallpaper_file:file r_file_perms;
-# Write to dalvikcache.
-allow system_app dalvikcache_data_file:file { write setattr };
-
# Write to properties
unix_socket_connect(system_app, property, init)
allow system_app debug_prop:property_service set;
diff --git a/system_server.te b/system_server.te
index e6167f1..99fb963 100644
--- a/system_server.te
+++ b/system_server.te
@@ -196,10 +196,6 @@
allow system_server backup_data_file:dir create_dir_perms;
allow system_server backup_data_file:file create_file_perms;
-# Manage /data/dalvik-cache.
-allow system_server dalvikcache_data_file:dir create_dir_perms;
-allow system_server dalvikcache_data_file:file create_file_perms;
-
# Read from /data/dalvik-cache/profiles
allow system_server dalvikcache_profiles_data_file:dir rw_dir_perms;
allow system_server dalvikcache_profiles_data_file:file create_file_perms;