diff --git a/domain.te b/domain.te
index c115f87b0594d48b8f5f1da490082f530a8911f5..70f8f6a5bc1554569a09952c1fae6573cdda3f66 100644
--- a/domain.te
+++ b/domain.te
@@ -471,5 +471,4 @@ neverallow {
   -shell
   userdebug_or_eng(`-uncrypt')
   -installd
-  -surfaceflinger # TODO: see if we can remove from mako sepolicy
 } shell_data_file:lnk_file read;