diff --git a/edxp-core/template_override/sepolicy.rule b/edxp-core/template_override/sepolicy.rule index a0e13f24..3b02a68c 100644 --- a/edxp-core/template_override/sepolicy.rule +++ b/edxp-core/template_override/sepolicy.rule @@ -1,13 +1,6 @@ -# necessary for using mmap in system_server process allow system_server system_server process {execmem} allow system_server system_server memprotect {mmap_zero} - -# for built-in apps // TODO maybe narrow down the target classes allow coredomain coredomain process {execmem} - -# read configs set in our app allow coredomain app_data_file * * attradd {system_app platform_app} mlstrustedsubject - -# read module apk file in zygote allow zygote apk_data_file * *