commit a499041fe89ecc85aa1b7809b277ae9cc86179f7
author Nick Kralevich <nnk@google.com> Thu Apr 07 15:56:24 2016 -0700
committer Jeff Vander Stoep <jeffv@google.com> Fri Apr 15 09:43:44 2016 -0700
tree 2c54121c3a5bfc358bb4e955014a6c5f14504cbe
parent 10908ff29dfb654787f99f1e4ea7e4bf2c93aec9

drop vold from sys_rawio neverallow exception

(cherry picked from commit 1df23cbf8ef4cd35cf6ab832120c2d1a86a46ffd)

This does not appear needed anymore.

Bug: 27549740
Change-Id: I3128ab610c742b18008f4cfc2a7116b210f770e7

domain.te

diff --git a/domain.te b/domain.te
index d7333c5..ed08dc0 100644
--- a/domain.te
+++ b/domain.te
@@ -165,7 +165,7 @@
 } self:capability mknod;
 
 # Limit raw I/O to these whitelisted domains.
-neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -vold -uncrypt -tee } self:capability sys_rawio;
+neverallow { domain -kernel -init -recovery -ueventd -watchdogd -healthd -uncrypt -tee } self:capability sys_rawio;
 
 # No process can map low memory (< CONFIG_LSM_MMAP_MIN_ADDR).
 neverallow * self:memprotect mmap_zero;