Merge "neverallow shell access to 'device' type" am: 536d195469
am: ee1ff62257

Change-Id: Icacd360b526c2133c3cee0c5c9e9055406fb943c
diff --git a/private/domain.te b/private/domain.te
index c022564..6fef279 100644
--- a/private/domain.te
+++ b/private/domain.te
@@ -49,7 +49,6 @@
     coredomain
     -fsck
     -init
-    -shell
     -ueventd
     -vendor_init
   } device:{ blk_file file } no_rw_file_perms;