diff --git a/vendor/google/hal_confirmationui.te b/vendor/google/hal_confirmationui.te
index e6e07b8..1486a28 100644
--- a/vendor/google/hal_confirmationui.te
+++ b/vendor/google/hal_confirmationui.te
@@ -1,14 +1,3 @@
-allow hal_confirmationui_server tee_device:chr_file rw_file_perms;
-allow hal_confirmationui_server ion_device:chr_file r_file_perms;
-
-allow hal_confirmationui_server hal_tui_comm_hwservice:hwservice_manager find;
 binder_call(hal_confirmationui_server, hal_tui_comm)
-
-vndbinder_use(hal_confirmationui_server)
-allow hal_confirmationui_server citadeld_service:service_manager find;
 binder_call(hal_confirmationui_server, citadeld)
-
-binder_call(hal_confirmationui_server, keystore)
-
-allow hal_confirmationui_server input_device:chr_file rw_file_perms;
-allow hal_confirmationui_server input_device:dir r_dir_perms;
+allow hal_confirmationui_server citadeld_service:service_manager find;
diff --git a/vendor/qcom/common/file_contexts b/vendor/qcom/common/file_contexts
index 0e079dd..dfe7f2a 100644
--- a/vendor/qcom/common/file_contexts
+++ b/vendor/qcom/common/file_contexts
@@ -142,7 +142,6 @@
 /vendor/bin/grep                u:object_r:vendor_grep_exec:s0
 /vendor/bin/wifi_sniffer        u:object_r:wifi_sniffer_exec:s0
 
-/vendor/bin/hw/android\.hardware\.confirmationui@1\.0-service-bonito u:object_r:hal_confirmationui_default_exec:s0
 /vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.clearkey         u:object_r:hal_drm_clearkey_exec:s0
 /vendor/bin/hw/android\.hardware\.drm@[0-9]+\.[0-9]+-service\.widevine         u:object_r:hal_drm_widevine_exec:s0
 /vendor/bin/hw/android\.hardware\.keymaster@4\.0-service-qti         u:object_r:hal_keymaster_qti_exec:s0