From 4969f0cba6f21c7045ad83f4e3fff612736e53d6 Mon Sep 17 00:00:00 2001
From: Nikhilesh Reddy <reddyn@codeaurora.org>
Date: Tue, 25 Oct 2016 10:44:32 +0530
Subject: sepolicy: Update the rmt_stroage and rfs_access policies

The rmt_storage and rfs daemons no longer need sys_admin,
dac_overide and net_raw as it now has net_bind_service
capability to access ipcr/qmi sockets.

CRs-Fixed: 1057865
Change-Id: If4acfc4a04ce6c937736e8eaf5cd3bd00591c300
---
 common/rfs_access.te | 1 -
 1 file changed, 1 deletion(-)

(limited to 'common/rfs_access.te')

diff --git a/common/rfs_access.te b/common/rfs_access.te
index 318fffc1..629f9e46 100644
--- a/common/rfs_access.te
+++ b/common/rfs_access.te
@@ -54,7 +54,6 @@ allow rfs_access self:capability {
     setgid
     setpcap
     net_bind_service
-    net_raw
 };
 
 # RFS UID and GIDs were changed and moved from old values to new ones OEM range.
-- 
cgit v1.2.3