cuttlefish - remove shared/sepolicy/vendor/netd.te
This is no longer needed now that the kernel supports
the right options:
CONFIG_DUMMY=y
CONFIG_NETFILTER_XT_MATCH_QUOTA2_LOG=y
Previously:
vsoc_x86:/ # dmesg | egrep avc | egrep netd
[] type=1400 audit(): avc: denied { module_request } for comm="netd" kmod="netdev-dummy0" scontext=u:r:netd:s0 tcontext=u:r:kernel:s0 tclass=system permissive=0
[] type=1400 audit(): avc: denied { module_request } for comm="netd" kmod="net-pf-16-proto-5" scontext=u:r:netd:s0 tcontext=u:r:kernel:s0 tclass=system permissive=0
Test: atest (bunch of net tests) on cuttlefish,
looking at 'dmesg | egrep avc | egrep netd'
Bug: 147203196
Signed-off-by: Maciej Żenczykowski <maze@google.com>
Change-Id: Ie93581f14d202f19c6b38fc2a94ac48504f61e04
diff --git a/shared/sepolicy/vendor/netd.te b/shared/sepolicy/vendor/netd.te
deleted file mode 100644
index 238668c..0000000
--- a/shared/sepolicy/vendor/netd.te
+++ /dev/null
@@ -1,5 +0,0 @@
-# Don't log denials to do with loading kernel modules.
-# These are currently for modules such as
-# netdev-dummy0, dummy0, net-pf-16-proto-5.
-dontaudit netd self:capability sys_module;
-dontaudit netd kernel:system module_request;
