From 1020cada2d6fd9b08568cc474d2fc5ccde0fef18 Mon Sep 17 00:00:00 2001
From: Victor Hsieh <victorhsieh@google.com>
Date: Tue, 15 Aug 2023 11:29:35 -0700
Subject: [PATCH] Remove shell from neverallow of frp_block_device access

Since shell doesn't have any frp_block_device rule anyway.

Bug: None
Test: m

Change-Id: I5aeb54969359500f9473bc08cb1fd42e3470b428
---
 public/domain.te | 1 -
 1 file changed, 1 deletion(-)

diff --git a/public/domain.te b/public/domain.te
index 4ad73f18b..4e4730a33 100644
--- a/public/domain.te
+++ b/public/domain.te
@@ -579,7 +579,6 @@ neverallow {
   -init
   -recovery
   -system_server
-  -shell # Shell is further restricted in shell.te
   -ueventd # Further restricted in ueventd.te
 } frp_block_device:blk_file no_rw_file_perms;