commit 7c857e97bb103dcea340c8e7af8aff6259c76a7c
author Robert Craig <rpcraig@tycho.ncsc.mil> Wed Oct 16 11:19:51 2013 -0400
committer Nick Kralevich <nnk@google.com> Tue Oct 29 16:12:00 2013 -0700
tree 8ebd85c6611665959c34367c8299f082dd3aece9
parent 438010a640ad14f00e3617803566ed6767564ee9

Drop permissive constraint from mpdecision policy.

Change-Id: I43b75ff1a1c359e1378dbc79d73803d8be36472c

sepolicy/mpdecision.te

diff --git a/sepolicy/mpdecision.te b/sepolicy/mpdecision.te
index a8adb2d..042a086 100644
--- a/sepolicy/mpdecision.te
+++ b/sepolicy/mpdecision.te
@@ -5,8 +5,6 @@
 # Started by init
 init_daemon_domain(mpdecision)
 
-permissive mpdecision;
-
 # CPU hotplug uevent to manage cores
 allow mpdecision self:netlink_kobject_uevent_socket { create setopt bind read };
 allow mpdecision self:capability net_admin;