commit 33b21f0c91e7f3fe32b14ddee77d30c35fd86ba3
author Jooyung Han <jooyung@google.com> Tue Nov 02 16:01:04 2021 +0900
committer Jooyung Han <jooyung@google.com> Tue Nov 02 16:01:04 2021 +0900
tree 5ac58533395625bf99fd7ff4de21ebf6c9fee20f
parent 54bd8438b1ba8020a66720c1f8a14f5b0b2c4770

remove unnecessary right from virtualizationservice

Bug: n/a
Test: MicrodroidTestCases
Change-Id: I14580d89d03dd90498f665913d00484ff643ee6a

private/virtualizationservice.te

diff --git a/private/virtualizationservice.te b/private/virtualizationservice.te
index 0b02745..1e00dcd 100644
--- a/private/virtualizationservice.te
+++ b/private/virtualizationservice.te
@@ -22,9 +22,6 @@
 # When virtualizationservice execs a file with the crosvm_exec label, run it in the crosvm domain.
 domain_auto_trans(virtualizationservice, crosvm_exec, crosvm)
 
-# Let virtualizationservice exec other files (e.g. mk_cdisk) in the same domain.
-allow virtualizationservice system_file:file execute_no_trans;
-
 # Let virtualizationservice kill crosvm.
 allow virtualizationservice crosvm:process sigkill;