From 81c03013879739aa58254356e61d59d45b346a03 Mon Sep 17 00:00:00 2001
From: Lorenzo Colitti <lorenzo@google.com>
Date: Fri, 13 Jun 2014 12:00:21 +0900
Subject: [PATCH] Remove clatd's ability to write to proc files.

This is no longer required now that clatd has switched from IPv6
forwarding to sockets.

Bug: 15340961
Change-Id: Id7d503b842882d30e6cb860ed0af69ad4ea3e62c
---
 clatd.te | 1 -
 1 file changed, 1 deletion(-)

diff --git a/clatd.te b/clatd.te
index 372cc2d50..b0b5d9540 100644
--- a/clatd.te
+++ b/clatd.te
@@ -23,4 +23,3 @@ allow clatd self:capability dac_override;
 allow clatd self:netlink_route_socket nlmsg_write;
 allow clatd self:{ packet_socket rawip_socket tun_socket } create_socket_perms;
 allow clatd tun_device:chr_file rw_file_perms;
-allow clatd proc_net:file rw_file_perms;;
-- 
GitLab