location: use net_domain() for xtra download
net_domain() contains a group of permissions typically used for
network access. Granting this basket of permissions is much less
fragile than listing them out as is currently done. This moves
Marlin's policy inline with Wahoo and crosshatch policy.
avc: denied { getopt } for comm="XtraDownloadMsg"
scontext=u:r:location:s0 tcontext=u:r:location:s0
tclass=tcp_socket
Test: build
Change-Id: I336476f30a221271351c3663252ba8cba3e0bdd2
diff --git a/sepolicy/location.te b/sepolicy/location.te
index 2375691..ef4bce0 100644
--- a/sepolicy/location.te
+++ b/sepolicy/location.te
@@ -60,11 +60,6 @@
# Added to enable XTRA download (from internet) per
# audit2allow after a test that downloaded XTRA on boot
-allow location dnsproxyd_socket:sock_file write;
-allow location fwmarkd_socket:sock_file write;
-allow location netd:unix_stream_socket connectto;
-allow location port:tcp_socket name_connect;
-allow location self:tcp_socket { connect create read setopt write };
-allow location self:udp_socket { create ioctl read write };
+net_domain(location)
get_prop(location, wifi_prop)
