From db5242a72637b5e8ae1e2fdf0487806a6664d40f Mon Sep 17 00:00:00 2001
From: Nick Kralevich <nnk@google.com>
Date: Fri, 19 Dec 2014 17:22:35 -0800
Subject: [PATCH] toolbox: remove permissive_or_unconfined()

No obvious denials on flounder, the only device where swap
is used.

Change-Id: I5747ad2fd267cb71cbc1f69ffaec6b1e7db9ec1f
---
 toolbox.te | 1 -
 1 file changed, 1 deletion(-)

diff --git a/toolbox.te b/toolbox.te
index 68566060b..43411024c 100644
--- a/toolbox.te
+++ b/toolbox.te
@@ -3,7 +3,6 @@
 # Do NOT use this domain for toolbox when run by any other domain.
 type toolbox, domain;
 type toolbox_exec, exec_type, file_type;
-permissive_or_unconfined(toolbox)
 
 init_daemon_domain(toolbox)