release-request-4021e6ae-031d-4d22-801c-2cdce1f0700e-for-aosp-nougat-mr1-cts-r...

release-request-4021e6ae-031d-4d22-801c-2cdce1f0700e-for-aosp-nougat-mr1-cts-release-3994449 snap-temp-L72100000062559347

Change-Id: I8c4c0f48de93689e25cb74eb383e91a42a559b11

domain.te

@@ -572,25 +572,6 @@ neverallow * domain:file { execute execute_no_trans entrypoint };
 # TODO: fix system_server and dumpstate
 neverallow { domain -init -system_server -dumpstate } debugfs:file no_rw_file_perms;
 
-neverallow {
-  domain
-  -init
-  -recovery
-  -sdcardd
-  -vold
-} fuse_device:chr_file open;
-neverallow {
-  domain
-  -dumpstate
-  -init
-  -priv_app
-  -recovery
-  -sdcardd
-  -system_server
-  -ueventd
-  -vold
-} fuse_device:chr_file *;
-
 # Profiles contain untrusted data and profman parses that. We should only run
 # in from installd forked processes.
 neverallow {