radio: remove access to 'sysfs' type on marlin/sailfish
Bug: 65643247
Test: make/receive phone calls
Test: send/receive text messages
Test: browse internet on LTE network
No denials to 'sysfs' label are observed during tests on sailfish.
Change-Id: I6de770a344e4c2607569a6953c7af5d36f289125
diff --git a/sepolicy/radio.te b/sepolicy/radio.te
index 6015398..db47a29 100644
--- a/sepolicy/radio.te
+++ b/sepolicy/radio.te
@@ -35,8 +35,3 @@
# read access to sys/module/diagchar/parameters/timestamp_switch
allow radio sysfs_timestamp_switch:file r_file_perms;
-
-# TODO scope this down. Granting these here is not granting new permissions,
-# just moving existing permissions from domain_deprecated to radio as part of
-# b/28760354 in order to deprivilege other processes which do not need access.
-r_dir_file(radio, sysfs)
