commit 7a0ed9bca82c92c11631f62f3b929cd492bd6403
author Jeff Vander Stoep <jeffv@google.com> Mon Oct 09 23:53:40 2017 +0000
committer android-build-merger <android-build-merger@google.com> Mon Oct 09 23:53:40 2017 +0000
tree 769f90d31779e7aaae3c295fd519a466ac06ca17
parent ac4f00ce04c4f54536b03ba4186b119865b7c7e1
parent 5dba5b2a3e1bbad8c028c0c3bff4d8cbb6f1a7de

Merge "Remove unnecessary HAL permissions" am: f7196a885d am: 7d610705fa am: d874f049d4
am: 5dba5b2a3e

Change-Id: I1f75837ba99e6dd1961a911a9ab072e26d24837d

public/hal_cas.te

diff --git a/public/hal_cas.te b/public/hal_cas.te
index fd5d63b..b4801c5 100644
--- a/public/hal_cas.te
+++ b/public/hal_cas.te
@@ -10,9 +10,7 @@
 get_prop(hal_cas, serialno_prop)
 
 # Read files already opened under /data
-allow hal_cas system_data_file:dir { search getattr };
 allow hal_cas system_data_file:file { getattr read };
-allow hal_cas system_data_file:lnk_file r_file_perms;
 
 # Read access to pseudo filesystems
 r_dir_file(hal_cas, cgroup)

public/hal_drm.te

diff --git a/public/hal_drm.te b/public/hal_drm.te
index 5a6bf5c..666b1ba 100644
--- a/public/hal_drm.te
+++ b/public/hal_drm.te
@@ -19,9 +19,7 @@
 allow hal_drm system_file:lnk_file r_file_perms;
 
 # Read files already opened under /data
-allow hal_drm system_data_file:dir { search getattr };
 allow hal_drm system_data_file:file { getattr read };
-allow hal_drm system_data_file:lnk_file r_file_perms;
 
 # Read access to pseudo filesystems
 r_dir_file(hal_drm, cgroup)