From bc1939062408dfd8da866bd56f0c778800549e70 Mon Sep 17 00:00:00 2001 From: Joel Galenson Date: Wed, 5 Jun 2019 10:10:00 -0700 Subject: [PATCH] Remove lines added to core policy. Test: Build. Change-Id: I8b9a2c49637d59c565d2cf6eb701fdd548070b0d --- sepolicy/vendor/hal_drm_clearkey.te | 2 -- sepolicy/vendor/hal_drm_widevine.te | 1 - 2 files changed, 3 deletions(-) diff --git a/sepolicy/vendor/hal_drm_clearkey.te b/sepolicy/vendor/hal_drm_clearkey.te index 976b9fab..5632c3b2 100644 --- a/sepolicy/vendor/hal_drm_clearkey.te +++ b/sepolicy/vendor/hal_drm_clearkey.te @@ -7,5 +7,3 @@ init_daemon_domain(hal_drm_clearkey) hal_server_domain(hal_drm_clearkey, hal_drm) vndbinder_use(hal_drm_clearkey); - -allow hal_drm_clearkey { appdomain -isolated_app }:fd use; diff --git a/sepolicy/vendor/hal_drm_widevine.te b/sepolicy/vendor/hal_drm_widevine.te index f2725022..8e6eca1b 100644 --- a/sepolicy/vendor/hal_drm_widevine.te +++ b/sepolicy/vendor/hal_drm_widevine.te @@ -9,7 +9,6 @@ hal_server_domain(hal_drm_widevine, hal_drm) vndbinder_use(hal_drm_widevine); allow hal_drm_widevine mediacodec:fd use; -allow hal_drm_widevine { appdomain -isolated_app }:fd use; # The Qualcomm DRM-HAL implementation uses a vendor-binder service provided # by the HWC HAL.