universal7580: sepolicy: remove neverallows

Change-Id: I09d7e1d351601241b2f16b8db7eb965858b79a52

diff --git a/sepolicy/init.te b/sepolicy/init.te
index 4d6a88e29af33f6d1328ed0edc00970eee70b075..a6114dc1a372436a0dfc3b5c41e7f5a672045ac2 100644 (file)
--- a/sepolicy/init.te
+++ b/sepolicy/init.te
@@ -70,8 +70,6 @@ allow init sysfs_jack:file setattr;
 
 unix_socket_connect(init, property, rild)
 
-allow init { domain -lmkd -crash_dump }:process noatsecure;
-
 # Allow access to /proc/device-tree nodes
 r_dir_file(init, proc_dt_firmware)
 

diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te
index fbec1c27f31315a9cd673e1fe5b4337a7f8e5942..68aba798c7b59fb24b16ddd0bf150d3ba6e2f437 100644 (file)
--- a/sepolicy/system_server.te
+++ b/sepolicy/system_server.te
@@ -33,7 +33,6 @@ allow system_server sysfs_mdnie:file rw_file_perms;
 
 # memtrack HAL
 allow system_server debugfs:dir r_dir_perms;
-allow system_server debugfs:file r_file_perms;
 
 # sensor HAL
 allow system_server sensor_device:chr_file rw_file_perms;