Merge "kernel.te: drop allow kernel untrusted_app:fd use;"
am: 527d29a80d
* commit '527d29a80dd2af26d231b27b964ba8752d26a887':
kernel.te: drop allow kernel untrusted_app:fd use;
diff --git a/kernel.te b/kernel.te
index ed6b7ba..05838af 100644
--- a/kernel.te
+++ b/kernel.te
@@ -42,10 +42,7 @@
# MTP sync (b/15835289)
# kernel thread "loop0", used by the loop block device, for ASECs (b/17158723)
-allow kernel { priv_app untrusted_app }:fd use;
-# privileged apps have moved to the priv_app domain. Determine
-# if this permission is still needed. b/25331459
-auditallow kernel untrusted_app:fd use;
+allow kernel priv_app:fd use;
allow kernel sdcard_type:file { read write };
# Allow the kernel to read OBB files from app directories. (b/17428116)