diff --git a/private/app_zygote.te b/private/app_zygote.te index 46cea8e26..e3869cd79 100644 --- a/private/app_zygote.te +++ b/private/app_zygote.te @@ -34,8 +34,6 @@ allow app_zygote system_server:process getpgid; # Interaction between the app_zygote and its children. allow app_zygote isolated_app:process setpgid; -allow app_zygote properties_device:dir mounton; - # TODO (b/63631799) fix this access dontaudit app_zygote mnt_expand_file:dir getattr; diff --git a/private/webview_zygote.te b/private/webview_zygote.te index 7b05af2cd..055695007 100644 --- a/private/webview_zygote.te +++ b/private/webview_zygote.te @@ -83,8 +83,6 @@ allow webview_zygote same_process_hal_file:file { execute read open getattr map allow webview_zygote system_data_file:lnk_file r_file_perms; -allow webview_zygote properties_device:dir mounton; - # Send unsolicited message to system_server unix_socket_send(webview_zygote, system_unsolzygote, system_server)