From b53e84a7238ee02587b329b6475f25da3fff1214 Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Sun, 8 Jun 2014 22:30:58 -0700
Subject: [PATCH] surfaceflinger: remove unconfined domain reference.

surfaceflinger has been enforcing for a while now. Remove
the reference to the unconfined domain.

Change-Id: Ia86a0553e9c2db3c89f93e26179c79278d1d3bed
---
 surfaceflinger.te | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/surfaceflinger.te b/surfaceflinger.te
index 513378641..6a40bfcbc 100644
--- a/surfaceflinger.te
+++ b/surfaceflinger.te
@@ -64,5 +64,4 @@ allow surfaceflinger tee_device:chr_file rw_file_perms;
 
 # Do not allow accessing SDcard files as unsafe ejection could
 # cause the kernel to kill the process.
-# TODO: Remove -unconfineddomain when we remove permissive_or_unconfined above.
-neverallow { surfaceflinger -unconfineddomain } sdcard_type:file rw_file_perms;
+neverallow surfaceflinger sdcard_type:file rw_file_perms;
-- 
GitLab