omni: Remove neverallow fsck_untrusted sys_admin
(neverallow fsck_untrusted self (capability (setgid setuid sys_admin)))
The mount binary is no longer used, so we can drop it safely
Change-Id: Ieb6d892358d91a67fa0fc552cc4e187a9c7b3fd4
diff --git a/sepolicy/public/fsck_untrusted.te b/sepolicy/public/fsck_untrusted.te
index a08c640..2590cb2 100644
--- a/sepolicy/public/fsck_untrusted.te
+++ b/sepolicy/public/fsck_untrusted.te
@@ -1,5 +1,3 @@
#============= fsck_untrusted ==============
allow fsck_untrusted block_device:dir { getattr read open };
allow fsck_untrusted media_rw_data_file:dir { getattr read open };
-allow fsck_untrusted self:capability sys_admin;
-