priv_app.te: Remove auditallow for statsd
From go/sedenials, we see that com.android.vending needs this
permission. The auditallow was in place to see if any priv-apps other
than GMS core need this, and now we know.
Bug: 142672293
Test: Treehugger
Change-Id: Iad6caeb648bc23e85571b758a35649924cdeec69
diff --git a/private/priv_app.te b/private/priv_app.te
index a414079..80364c8 100644
--- a/private/priv_app.te
+++ b/private/priv_app.te
@@ -149,14 +149,8 @@
auditallow priv_app system_update_service:service_manager find;
')
-# Allow GMS core to communicate with statsd.
+# Allow com.android.vending to communicate with statsd.
binder_call(priv_app, statsd)
-# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
-userdebug_or_eng(`
- auditallow priv_app statsd:binder { call transfer };
- auditallow statsd priv_app:binder transfer;
- auditallow priv_app statsd:fd use;
-')
# Allow Phone to read/write cached ringtones (opened by system).
allow priv_app ringtone_file:file { getattr read write };