domain_deprecated: remove access to /proc/meminfo

am: 3e5bb807 Change-Id: I01f99884b0f8b06fa4938a606345c33918d8b295

domain_deprecated: remove access to /proc/meminfo
5fbb120b · Jeff Vander Stoep · android-build-merger · 77285737 · 3e5bb807 · 5fbb120b
Commit 5fbb120b authored 7 years ago by Jeff Vander Stoep Committed by android-build-merger 7 years ago
--- a/private/domain_deprecated.te
+++ b/private/domain_deprecated.te
@@ -144,7 +144,6 @@ auditallow {
 r_dir_file(domain_deprecated, proc)
 r_dir_file(domain_deprecated, sysfs)
 r_dir_file(domain_deprecated, cgroup)
-allow domain_deprecated proc_meminfo:file r_file_perms;
 userdebug_or_eng(`
 auditallow {
@@ -228,11 +227,4 @@ auditallow {
  -system_server
  -zygote
 } cgroup:{ file lnk_file } r_file_perms;
-auditallow {
-  domain_deprecated
-  -appdomain
-  -surfaceflinger
-  -system_server
-  -vold
-} proc_meminfo:file r_file_perms;
 ')