commit c716196ef9bc9abac3de071d049b9acf820b7a7e
author Sandeep Patil <sspatil@google.com> Wed Apr 12 18:04:02 2017 -0700
committer Sandeep Patil <sspatil@google.com> Thu Apr 13 14:59:46 2017 -0700
tree f5680f82acdb0787bda37e6152dfa93b2b01afdd
parent 57ac21f7fe50f07a3e4cd6b9a5157d11ff93504f

sepolicy: remove qtimeservice from coredomain

Bug: 36463595
Test: No new SELinux denial at boot on sailfish

Change-Id: I0473a078412fa10aae1289ef06c8fa47c1594f8a
Signed-off-by: Sandeep Patil <sspatil@google.com>
(cherry picked from commit 8ad65021579b58a5226b222fbd97f6840d040734)

sepolicy/qtimeservice.te

diff --git a/sepolicy/qtimeservice.te b/sepolicy/qtimeservice.te
index 87e3ad1..ba31862 100644
--- a/sepolicy/qtimeservice.te
+++ b/sepolicy/qtimeservice.te
@@ -1,5 +1,5 @@
 # Qualcomm TimeService app
-type qtimeservice, domain, coredomain;
+type qtimeservice, domain;
 
 app_domain(qtimeservice)
 

sepolicy/time.te

diff --git a/sepolicy/time.te b/sepolicy/time.te
index 297f66b..e821733 100644
--- a/sepolicy/time.te
+++ b/sepolicy/time.te
@@ -24,7 +24,3 @@
 userdebug_or_eng(`
   allow time  diag_device:chr_file rw_file_perms;
 ')
-
-# TODO(b/36613996): Remove this once qtimeservice no longer communicates over sockets with time
-# daemon or once qtimeservice becomes a vendor service
-typeattribute time socket_between_core_and_vendor_violators;