From 0d8ede8308ae0a7be842c8e4efde1b2dd9d2a92d Mon Sep 17 00:00:00 2001
From: Wilson Sung <wilsonsung@google.com>
Date: Fri, 10 Mar 2023 16:24:38 +0800
Subject: [PATCH] Enforce insmod-sh

Fix: 264490091
Test: Boot-to-home without insmod-sh avc error
Change-Id: I9868bdfd8fad7ac37c8d1104fb1fab10a7e8f79a
---
 tracking_denials/insmod-sh.te | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/tracking_denials/insmod-sh.te b/tracking_denials/insmod-sh.te
index 04c00fe8..adf41ef2 100644
--- a/tracking_denials/insmod-sh.te
+++ b/tracking_denials/insmod-sh.te
@@ -1,9 +1,5 @@
 # b/260522378
 dontaudit insmod-sh vendor_regmap_debugfs:dir { search };
-# b/264490091
-userdebug_or_eng(`
-  permissive insmod-sh;
-')
 # b/272166723
 userdebug_or_eng(`
   allow insmod-sh self:lockdown integrity;