From 33b21f0c91e7f3fe32b14ddee77d30c35fd86ba3 Mon Sep 17 00:00:00 2001
From: Jooyung Han <jooyung@google.com>
Date: Tue, 2 Nov 2021 16:01:04 +0900
Subject: [PATCH] remove unnecessary right from virtualizationservice

Bug: n/a
Test: MicrodroidTestCases
Change-Id: I14580d89d03dd90498f665913d00484ff643ee6a
---
 private/virtualizationservice.te | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/private/virtualizationservice.te b/private/virtualizationservice.te
index 0b0274505..1e00dcdd1 100644
--- a/private/virtualizationservice.te
+++ b/private/virtualizationservice.te
@@ -22,9 +22,6 @@ add_service(virtualizationservice, virtualization_service)
 # When virtualizationservice execs a file with the crosvm_exec label, run it in the crosvm domain.
 domain_auto_trans(virtualizationservice, crosvm_exec, crosvm)
 
-# Let virtualizationservice exec other files (e.g. mk_cdisk) in the same domain.
-allow virtualizationservice system_file:file execute_no_trans;
-
 # Let virtualizationservice kill crosvm.
 allow virtualizationservice crosvm:process sigkill;