Deduplicate binder_call rules.
A number of binder_call rules are duplicated by other rules
written in terms of attributes/sets (e.g. appdomain, binderservicedomain).
Get rid of the duplicates.
Also use binder_use() in racoon.te rather than manually writing the
base rule for communicating with the servicemanager.
Change-Id: I5a459cc2154b1466bcde6eccef253dfcdcb44e0a
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
diff --git a/racoon.te b/racoon.te
index 1fbdb07..02b4ba3 100644
--- a/racoon.te
+++ b/racoon.te
@@ -8,7 +8,7 @@
net_domain(racoon)
-binder_call(racoon, servicemanager)
+binder_use(racoon)
binder_call(racoon, keystore)
allow racoon tun_device:chr_file r_file_perms;